1 matches found
XML External Entity (XXE) Injection
@cyclonedx/cyclonedx-library is vulnerable to XML External Entity XXE Injection. The vulnerability is due to improper XML parsing configuration within xmlValidator.node.ts, allowing an attacker to potentially access sensitive files or execute malicious code through crafted XML entities...
8.1CVSS7AI score0.00925EPSS
SaveExploits0References4Affected Software1
20