CVE-2023-28150

An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

CVE-2023-28150

Independentsoft JODF (Java/Android) before 1.1.110 is affected by a XML External Entity (XXE) injection in DOCX processing via a remote DTD. The root cause is XXE handling in the API’s XML parsing, enabling potential disclosure or manipulation consistent with XXE risks. CVSS metrics in the CVE en...

CVE-2023-28150

An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...