XML External Entity (XXE) Injection

org.openimaj, openimaj is vulnerable to XML External Entity XXE injection. The vulnerability is due to improper handling of external entities in XML files. Specifically, the system fails to properly validate or sanitize XML input, allowing attackers to craft malicious XML that can trigger...

XML External Entity (XXE)

GeoNode is vulnerable to XML External Entity XXE. The vulnerability is due to improper handling of XML input in the style upload functionality of GeoServer, allowing an attacker to read arbitrary files on the server...