CVE-2021-3836

CVE-2021-3836 affects DBeaver prior to 21.2.3. Nessus details XXE vulnerability: parsing crafted XML in XMLUtils.parseDocument() may allow an attacker to access local files via XML entities. Affected product: DBeaver on Windows (pre-21.2.3). Impact described as local file exposure; no exploitatio...

CVE-2021-3836

dbeaver is vulnerable to Improper Restriction of XML External Entity Reference...

CVE-2021-3836 Improper Restriction of XML External Entity Reference in dbeaver/dbeaver

dbeaver is vulnerable to Improper Restriction of XML External Entity Reference...

PT-2021-22080

Name of the Vulnerable Software and Affected Versions dbeaver affected versions not specified Description The issue is related to Improper Restriction of XML External Entity Reference. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

CVE-2021-3836: Improper Restriction of XML External Entity Reference

dbeaver is vulnerable to Improper Restriction of XML External Entity Reference...

DBeaver 代码问题漏洞

DBeaver is a free multi-platform database tool for developers, Sql programmers, database administrators and analysts from the DBeaver team in the U.S. An XML external entity injection vulnerability exists in DBeaver, which stems from a web-based system or product that does not set the correct...

in dbeaver/dbeaver

✍️ Description The dbeaver is vulnerable to XML External Entity XXE. An attacker that is able to provide a crafted XML file as input to the parseDocument function in the "XMLUtils.java" file may allow an attacker to execute XML External Entities XXE, including exposing the contents of local files...