Lucene search
K

XML External Entity (XXE) Injection

🗓️ 18 Jul 2025 05:53:34Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 2 Views

XML External Entity injection in org.dspace allows sensitive file disclosure and SSRF risks.

Related
Detection
Refs
Vulners
Node
dspace-apidspace-apiRange9.0-rc19.0java
OR
dspace-apidspace-apiRange8.0-rc18.1java
OR
dspace-apidspace-apiRange1.6.0-rc17.6.3java
OR
dspace-apidspace-apiMatch1.5-alphajava
OR
dspace-apidspace-apiMatch1.5.0java
OR
dspace-apidspace-apiMatch1.5.0-beta1java
OR
dspace-apidspace-apiMatch1.5.0-beta2java
OR
dspace-apidspace-apiMatch1.5.0-rc1java
OR
dspace-apidspace-apiMatch1.5.1java
OR
dspace-apidspace-apiMatch1.5.1-betajava
OR
dspace-apidspace-apiMatch1.5.2java
OR
dspace-apidspace-apiMatch1.5.2-rc1java
OR
dspace-apidspace-apiMatch1.5.2-rc2java
OR
dspace-apidspace-apiMatch1.6.0java
OR
dspace-apidspace-apiMatch1.6.0-rc1java
OR
dspace-apidspace-apiMatch1.6.0-rc2java
OR
dspace-apidspace-apiMatch1.6.1java
OR
dspace-apidspace-apiMatch1.6.2java
OR
dspace-apidspace-apiMatch1.7.0java
OR
dspace-apidspace-apiMatch1.7.0-rc1java
OR
dspace-apidspace-apiMatch1.7.0-rc2java
OR
dspace-apidspace-apiMatch1.7.1java
OR
dspace-apidspace-apiMatch1.7.2java
OR
dspace-apidspace-apiMatch1.7.3java
OR
dspace-apidspace-apiMatch1.8.0java
OR
dspace-apidspace-apiMatch1.8.0-rc1java
OR
dspace-apidspace-apiMatch1.8.0-rc2java
OR
dspace-apidspace-apiMatch1.8.0-rc3java
OR
dspace-apidspace-apiMatch1.8.1java
OR
dspace-apidspace-apiMatch1.8.2java
OR
dspace-apidspace-apiMatch1.8.3java
OR
dspace-apidspace-apiMatch2.0.0-or09java
OROR
dspace-apidspace-apiMatch3.0-rc1java
OR
dspace-apidspace-apiMatch3.0-rc2java
OR
dspace-apidspace-apiMatch3.0-rc3java
OROROROROROROROR
dspace-apidspace-apiMatch4.0-rc1java
OR
dspace-apidspace-apiMatch4.0-rc2java
OR
dspace-apidspace-apiMatch4.0-rc3java
OROROROROROROROROROROR
dspace-apidspace-apiMatch5.0-rc1java
OR
dspace-apidspace-apiMatch5.0-rc2java
OR
dspace-apidspace-apiMatch5.0-rc3java
OROROROROROROROROROROROROR
dspace-apidspace-apiMatch6.0-rc1java
OR
dspace-apidspace-apiMatch6.0-rc2java
OR
dspace-apidspace-apiMatch6.0-rc3java
OR
dspace-apidspace-apiMatch6.0-rc4java
OROROROROROR
dspace-apidspace-apiMatch7.0-beta1java
OR
dspace-apidspace-apiMatch7.0-beta2java
OR
dspace-apidspace-apiMatch7.0-beta2.1java
OR
dspace-apidspace-apiMatch7.0-beta3java
OR
dspace-apidspace-apiMatch7.0-beta4java
OR
dspace-apidspace-apiMatch7.0-beta4.1java
OR
dspace-apidspace-apiMatch7.0-beta5java
OR
dspace-apidspace-apiMatch7.0-preview-1java
OROR
dspace-apidspace-apiMatch7.1.1java
OROR
dspace-apidspace-apiMatch7.2.1java
OROROROROR
dspace-apidspace-apiMatch7.6.1java
OR
dspace-apidspace-apiMatch7.6.2java
OROR
dspace-apidspace-apiRange1.5-alpha7.6.3java
OR
dspace-apidspace-apiRange8.08.1java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Jun 2026 08:20Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.16.9
EPSS0.00283
SSVC
2