Lucene search
+L

1 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2024/11/08 12:0 a.m.15 views

XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

XSLT parsing performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.core is being used to within a host where external clients...

8.6CVSS8.4AI score0.00918EPSS
SaveExploits0References9
Rows per page
Query Builder