Lucene search
Veracode Vulnerability DatabaseVERACODE:46714HistoryMay 02, 2024 - 8:28 a.m.
Arbitrary Code Execution
2024-05-0208:28:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
xmlunit-core
vulnerability
arbitrary code execution
xslt
transformerfactoryconfigurer
untrusted files
code execution
AI Score
7.8
Confidence
High
org.xmlunit: xmlunit-core is vulnerable to Arbitrary Code Execution. The vulnerability is due to enabling XSLT extension transformation functions by default within TransformerFactoryConfigurer.java, which could allows attackers to execute arbitrary code during XSLT transformations if an application parses untrusted XSLT files.
Related
ibm
ibm
osv
osv
XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets
2024-05-01 16:40:01
github
github
XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets
2024-05-01 16:40:01