Vulners
Lucene search
2 matches found
XML External Entity Reference in edu.stanford.nlp:stanford-corenlp
The TransformXML function makes use of SAXParser generated from a SAXParserFactory with no FEATURESECUREPROCESSING set, allowing for XXE attacks...
7.1CVSS5.2AI score0.00186EPSS
Exploits1References4Affected Software1
GHSA-MH83-JCW5-RJH8 XML External Entity Reference in edu.stanford.nlp:stanford-corenlp
The TransformXML function makes use of SAXParser generated from a SAXParserFactory with no FEATURESECUREPROCESSING set, allowing for XXE attacks...
6.1CVSS7.2AI score0.00186EPSS
Exploits1References4
20