CVE-2024-46984 XML External Entity Reference (XXE) vulnerability can lead to a Server Side Request Forgery attack in gematik app-referencevalidator

The reference validator is a tool to perform advanced validation of FHIR resources for TI applications and interoperability standards. The profile location routine in the referencevalidator commons package is vulnerable to XML External Entities attack due to insecure defaults of the used Woodstox...

CVE-2024-46984 XML External Entity Reference (XXE) vulnerability can lead to a Server Side Request Forgery attack in gematik app-referencevalidator

The reference validator is a tool to perform advanced validation of FHIR resources for TI applications and interoperability standards. The profile location routine in the referencevalidator commons package is vulnerable to XML External Entities attack due to insecure defaults of the used Woodstox...

CVE-2024-46984

The reference validator is a tool to perform advanced validation of FHIR resources for TI applications and interoperability standards. The profile location routine in the referencevalidator commons package is vulnerable to XML External Entities attack due to insecure defaults of the used Woodstox...

GHSA-68J8-FP38-P48Q Gematik Referenzvalidator has an XXE vulnerability that can lead to a Server Side Request Forgery attack

Impact The profile location routine in the referencevalidator commons package is vulnerable to XML External Entities attack due to insecure defaults of the used Woodstox WstxInputFactory. A malicious XML resource can lead to network requests issued by referencevalidator and thus to a Server Side...

de.gematik.refv.valmodule:valmodule-erp (0.1.3), de.gematik.refv:referencevalidator-cli (0.1.3) +1 more potentially affected by CVE-2024-46984 via de.gematik.refv.commons:commons (0.1.3)

de.gematik.refv.commons:commons MAVEN version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on de.gematik.refv.commons:commons and may be impacted: - de.gematik.refv.valmodule:valmodule-erp 0.1.3 - de.gematik.refv:referencevalidator-cli 0.1.3 -...

de.gematik.refv.valmodule:valmodule-diga (0.7.2), de.gematik.refv.valmodule:valmodule-eau (0.7.2) +7 more potentially affected by CVE-2024-46984 via de.gematik.refv.commons:commons (0.7.2)

de.gematik.refv.commons:commons MAVEN version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on de.gematik.refv.commons:commons and may be impacted: - de.gematik.refv.valmodule:valmodule-diga 0.7.2 - de.gematik.refv.valmodule:valmodule-eau 0.7.2 -...

PT-2024-32318 · Unknown · Referencevalidator +1

Name of the Vulnerable Software and Affected Versions: referencevalidator versions prior to 2.5.1 Description: The profile location routine in the referencevalidator commons package is vulnerable to XML External Entities attack due to insecure defaults of the used Woodstox WstxInputFactory. A...

CVE-2024-46984: Improper Restriction of XML External Entity Reference

The reference validator is a tool to perform advanced validation of FHIR resources for TI applications and interoperability standards. The profile location routine in the referencevalidator commons package is vulnerable to XML External Entities attack due to insecure defaults of the used Woodstox...