Lucene search
Veracode Vulnerability DatabaseVERACODE:8057HistoryDec 21, 2018 - 3:14 a.m.
XML External Entity Injection (XXE)
2018-12-2103:14:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
57.9%
neo4j-apoc-procedures is susceptible to XML external entity injection (XXE). The vulnerability is caused due to the way XML parser processes XML input containing a reference to an external entity using a weak configuration.
| CPE | Name | Operator | Version |
|---|---|---|---|
| neo4j-apoc-procedure | le | 3.4.03 | |
| neo4j-apoc-procedure | le | 3.4.03 |
Related
prion
prion
Xxe
2018-12-20 15:29:00
cve
cve
CVE-2018-1000820
2022-10-03 16:21:59
github
github
XML External Entity (XXE) vulnerability in neo4j.procedure:apoc
2018-12-20 22:02:02
cvelist
cvelist
CVE-2018-1000820
2022-10-03 16:21:59
osv
osv
XML External Entity (XXE) vulnerability in neo4j.procedure:apoc
2018-12-20 22:02:02
nvd
nvd
CVE-2018-1000820
2018-12-20 15:29:00