10143 matches found
GHSA-2RMM-87V7-34RJ Improper Restriction of XML External Entity Reference in Any23
An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...
Improper Restriction of XML External Entity Reference in Any23
An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...
CVE-2022-25312
An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...
CVE-2022-25312
An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...
Xxe
An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...
GHSA-JVFV-HRRC-6Q72 Improper Restriction of XML External Entity Reference in Liquibase
The XMLChangeLogSAXParser function in Liquibase prior to version 4.8.0 contains an issue that may lead to to Improper Restriction of XML External Entity Reference...
Improper Restriction of XML External Entity Reference in Liquibase
The XMLChangeLogSAXParser function in Liquibase prior to version 4.8.0 contains an issue that may lead to to Improper Restriction of XML External Entity Reference...
CVE-2022-25312 An XML external entity (XXE) injection vulnerability exists in the Apache Any23 RDFa XSLTStylesheet extractor
An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...
CVE-2022-25312
The CVE-2022-25312 vulnerability concerns the Apache Any23 project, specifically the RDFa XSLTStylesheet extractor. Affected versions are Any23
CVE-2022-25312 An XML external entity (XXE) injection vulnerability exists in the Apache Any23 RDFa XSLTStylesheet extractor
An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...
Xxe
Improper Restriction of XML External Entity Reference in GitHub repository liquibase/liquibase prior to 4.8.0...
CVE-2022-0839
CVE-2022-0839 affects Liquibase in liquibase/liquibase prior to 4.8.0, due to improper validation in XMLChangeLogSAXParser() that enables XML External Entity processing. This could allow a remote attacker to disclose sensitive information or perform SSRF. The documented remediation is to upgrade ...
XML External Entity (XXE)
hazelcast is vulnerable to XML external entity attacks. The AbstractXmlConfigRootTagRecognizer function of AbstractXmlConfigRootTagRecognizer.java does not disable access to external entities by default, allowing an attacker to submit a malicious XML document to perform requests on behalf of the...
GHSA-99WH-973F-779P XML External Entity Reference in Hazelcast
The AbstractXmlConfigRootTagRecognizer function makes use of SAXParser generated from a SAXParserFactory with no FEATURESECUREPROCESSING set, allowing for XXE attacks...
PT-2022-13463 · Liquibase · Liquibase
Name of the Vulnerable Software and Affected Versions: Liquibase versions prior to 4.8.0 Description: The issue is related to an Improper Restriction of XML External Entity Reference. The XMLChangeLogSAXParser function contains this issue, which may lead to exploitation. Recommendations: For...
Github liquibase 代码问题漏洞
Github liquibase is used to track, version, and deploy database architecture changes. A security vulnerability exists in liquibase that stems from improperly restricted XML external entity references...
CVE-2022-0265
Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1...
Xxe
Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1...
CVE-2022-0265
CVE-2022-0265 affects Hazelcast (Hazelcast IMDG) in version 5.1-BETA-1, exposing an XML External Entity (XXE) processing weakness. The description and related advisories indicate improper restriction of XML external entities in the Hazelcast code path, enabling an attacker to reference external e...