OSV-2022-435 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47657 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.StringUTF16.checkBoundsOffCount java.base/java.lang.StringUTF16.getChars...

The vulnerability of the software processing module in the Plone content management system allows attackers to enhance their privileges.

The vulnerability of the Plone content management system’s software processing module is related to errors in processing the plone.app.contenttypes package. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...