EUVD-2023-31861

Malicious code in bioql PyPI...

CVE-2023-28150

An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

CVE-2023-28150

An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

CVE-2023-28150

An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

CVE-2023-28150

Independentsoft JODF (Java/Android) before 1.1.110 is affected by a XML External Entity (XXE) injection in DOCX processing via a remote DTD. The root cause is XXE handling in the API’s XML parsing, enabling potential disclosure or manipulation consistent with XXE risks. CVSS metrics in the CVE en...

PT-2023-21596

Name of the Vulnerable Software and Affected Versions Independentsoft JODF versions prior to 1.1.110 Description An issue was discovered in the API, which is prone to XML external entity XXE injection via a remote DTD in a DOCX file. This allows for potential exploitation. Recommendations For...

CVE-2023-28150: Improper Restriction of XML External Entity Reference

An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...