Lucene search
+L

3 matches found

Veracode
Veracode
added 2022/03/07 9:0 a.m.31 views

XML External Entity (XXE) Injection

org.apache.any23:apache-any23-core is vulnerable to XML external entity XXE injection attacks. An attacker is able to view files and to interact with any back-end or external systems that the application itself can access due to the vulnerable RDFa XSLTStylesheet extractor component...

9.1CVSS3AI score0.02814EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2022/03/04 11:25 p.m.29 views

CVE-2022-25312 An XML external entity (XXE) injection vulnerability exists in the Apache Any23 RDFa XSLTStylesheet extractor

An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...

9.1AI score0.02814EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/04 11:25 p.m.17 views

CVE-2022-25312 An XML external entity (XXE) injection vulnerability exists in the Apache Any23 RDFa XSLTStylesheet extractor

An XML external entity XXE injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions 2.7. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's...

9.1CVSS7.2AI score0.02814EPSS
SaveExploits0References4
Rows per page
Query Builder