Apache Any23 code issues and vulnerabilities

Apache Any23 is a library, Web service, and command-line tool from the Apache Foundation, USA. It can extract structured data in RDF format from a variety of Web documents.Any23 versions prior to 2.7 contain a code issue vulnerability that could be exploited by an attacker to interfere with an...

CVE-2022-25312: Improper Restriction of XML External Entity Reference

An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...

CVE-2021-38555: Improper Restriction of XML External Entity Reference

An XML external entity XXE injection vulnerability was discovered in the Any23 StreamUtils.java file and is known to affect Any23 versions 2.5. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of...

PT-2021-22207

Name of the Vulnerable Software and Affected Versions Any23 versions prior to 2.5 Description An XML external entity XXE injection issue was discovered in the Any23 StreamUtils.java file. This is a web security issue that allows an attacker to interfere with an application's processing of XML dat...