Lucene search
Veracode Vulnerability DatabaseVERACODE:34550HistoryMar 07, 2022 - 9:00 a.m.
XML External Entity (XXE) Injection
2022-03-0709:00:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21
xml external entity
xxe injection
org.apache.any23:apache-any23-core
rdfa xsltstylesheet extractor
vulnerable software
EPSS
0.002
Percentile
55.2%
org.apache.any23:apache-any23-core is vulnerable to XML external entity (XXE) injection attacks. An attacker is able to view files and to interact with any back-end or external systems that the application itself can access due to the vulnerable RDFa XSLTStylesheet extractor component.
Related
osv
osv
Improper Restriction of XML External Entity Reference in Any23
2022-03-06 00:00:17
CVE-2022-25312
2022-03-05 00:15:07
prion
prion
Xxe
2022-03-05 00:15:00
nvd
nvd
CVE-2022-25312
2022-03-05 00:15:07
cvelist
cvelist
github
github
Improper Restriction of XML External Entity Reference in Any23
2022-03-06 00:00:17
cnvd
cnvd
Apache Any23 code issue vulnerability
2022-03-08 00:00:00
cve
cve
CVE-2022-25312
2022-03-05 00:15:07