2 matches found
MGASA-2017-0403 Updated lucene packages fix security vulnerability
It was found that the CoreParser class in Lucene accepts doctype declaration and expands external entities. An attacker could use this flaw to bypass security restrictions and access sensitive data CVE-2017-12629...
9.8CVSS9.3AI score0.91896EPSS
SaveExploits12References3
Updated lucene packages fix security vulnerability
It was found that the CoreParser class in Lucene accepts doctype declaration and expands external entities. An attacker could use this flaw to bypass security restrictions and access sensitive data CVE-2017-12629...
9.8CVSS3.6AI score0.91896EPSS
SaveExploits12References2
20