Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2024/11/11 9:31 p.m.14 views

powertac-server XML External Entity vulnerability

An XML External Entity XXE vulnerability in the component DocumentBuilderFactory of powertac-server v1.9.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS7.3AI score0.00693EPSS
Exploits0References5Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2024/11/05 12:0 a.m.17 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.07937EPSS
Exploits1References5
GitLab Advisory Database
GitLab Advisory Database
added 2024/11/05 12:0 a.m.20 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.07937EPSS
Exploits1References5
GitLab Advisory Database
GitLab Advisory Database
added 2024/11/05 12:0 a.m.16 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.07937EPSS
Exploits1References5
GitLab Advisory Database
GitLab Advisory Database
added 2024/11/05 12:0 a.m.23 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.07937EPSS
Exploits1References5
GitLab Advisory Database
GitLab Advisory Database
added 2024/11/05 12:0 a.m.25 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.07937EPSS
Exploits1References5
Veracode
Veracode
added 2020/01/16 11:34 a.m.6 views

XML External Entity (XXE)

mybatis-generator-core is vulnerable to XML External Entity XXE attacks. The vulnerability exists because the 'parseConfiguration' function in 'ConfigurationParser' does not restrict fetching and processing of external XML resources, allowing an attacker to inject and process malicious external...

3.8AI score
Exploits0
Rows per page
Query Builder