Lucene search
+L

5 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•11 views

CVE-2024-34345: Improper Restriction of XML External Entity Reference

The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1...

8.1CVSS5.9AI score0.00925EPSS
SaveExploits0References1
Rows per page
Query Builder