Memory Analyzer Security Vulnerabilities - 2023

CVE-2023-6194

In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibitdocument type definition (DTD) references to external entities.This means that if a user chooses to use a malicious report definition XML file containing an external entity referenceto generat...