Lucene search
+L

1 matches found

OSV
OSV
added 2017/10/03 1:29 a.m.2 views

CVE-2017-12620

When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is a library, this only affects applications that load models or dictionaries from untrusted sources. The versions 1.5.0 to 1.5.3, 1.6.0, 1.7.0 to 1.7.2, 1.8.0 to 1.8.1 of Apache...

9.8CVSS7.3AI score0.03016EPSS
SaveExploits5References1
Rows per page
Query Builder