Lucene search
Veracode Vulnerability DatabaseVERACODE:22416HistoryJan 31, 2020 - 4:26 a.m.
XML External Entity (XXE)
2020-01-3104:26:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.003 Low
EPSS
Percentile
68.5%
checkstyle is vulnerable to XML external entity attacks. The external-parameter-entities feature is not disabled by default, allowing a remote attacker to retrieve system files or perform requests on behalf of the server via a malicious XML document.
| CPE | Name | Operator | Version |
|---|---|---|---|
| checkstyle | le | 8.28 | |
| checkstyle | le | 8.5 | |
| checkstyle | le | 8.17 |
Related
osv
osv
checkstyle - security update
2020-02-10 00:00:00
XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))
2020-01-31 18:00:07
CVE-2019-10782
2020-01-30 23:15:10
debiancve
debiancve
CVE-2019-10782
2020-01-30 23:15:10
redhatcve
redhatcve
CVE-2019-10782
2020-07-30 17:43:29
github
github
openvas
openvas
Debian: Security Advisory (DLA-2099-1)
2020-02-11 00:00:00
ubuntucve
ubuntucve
CVE-2019-10782
2020-01-30 00:00:00
cve
cve
CVE-2019-10782
2020-01-30 23:15:10
prion
prion
Xxe
2020-01-30 23:15:00
debian
debian
[SECURITY] [DLA 2099-1] checkstyle security update
2020-02-10 15:55:38
cvelist
cvelist
CVE-2019-10782
2020-01-30 22:16:00
nessus
nessus
Debian DLA-2099-1 : checkstyle security update
2020-02-13 00:00:00
nvd
nvd
CVE-2019-10782
2020-01-30 23:15:10