5 matches found
CVE-2024-34345: Improper Restriction of XML External Entity Reference
The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1...
8.1CVSS5.9AI score0.00925EPSS
SaveExploits0References1
20