CVE-2017-20151

The CVE-2017-20151 issue affects iText RUPS, specifically code in XfaFile.java that can lead to an XML External Entity (XXE) reference. The public documentation consistently notes the vulnerability arises from manipulating XfaFile.java and identifies the patch as ac5590925874ef810018a6b60fec216ee...