org.powertac:accounting (0.6.3), org.powertac:auctioneer (0.6.3) +8 more potentially affected by CVE-2024-51135 via org.powertac:server-interface (0.6.3)

org.powertac:server-interface MAVEN version 0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.powertac:server-interface and may be impacted: - org.powertac:accounting 0.6.3 - org.powertac:auctioneer 0.6.3 - org.powertac:default-broker 0.6.3 -...

org.powertac:accounting (0.5.1), org.powertac:auctioneer (0.5.1) +8 more potentially affected by CVE-2024-51135 via org.powertac:server-interface (0.5.1)

org.powertac:server-interface MAVEN version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.powertac:server-interface and may be impacted: - org.powertac:accounting 0.5.1 - org.powertac:auctioneer 0.5.1 - org.powertac:default-broker 0.5.1 -...

CVE-2024-51135

An XML External Entity XXE vulnerability in the component DocumentBuilderFactory of powertac-server v1.9.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...