CloudEvents 安全漏洞

CloudEvents is a Java SDK for CloudEvents open source by CloudEvents. A security vulnerability exists in CloudEvents version v4.0.1, which stems from an XML external entity vulnerability in the deserializeArgs method...

CVE-2024-55156: Use of Externally-Controlled Format String

An XML External Entity XXE vulnerability in the deserializeArgs method of Java SDK for CloudEvents v4.0.1 allows attackers to access sensitive information via supplying a crafted XML-formatted event message...