CVE-2020-36640

A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...

CVE-2020-36640 bonitasoft bonita-connector-webservice SecureWSConnector.java TransformerConfigurationException xml external entity reference

A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...

CVE-2020-36640

In CVE-2020-36640, Bonitasoft bonita-connector-webservice (up to 1.3.0) contains a vulnerability in TransformerConfigurationException in SecureWSConnector.java that leads to an XML External Entity (XXE) reference. The issue is mitigated by upgrading to version 1.3.1; the patch is identified as a1...