الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Angledluffa

#22490من 60,574
13.6إجمالي CVSS
الثغرات · 2
متوسطة
1
عالية
1
PT-2022-13058
2022-01-17
7.5
CVE-2022-0239
Corenlp
Corenlp
The issue is related to Improper Restriction of XML External Entity Reference. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.
PT-2022-13031
2022-01-13
6.1
CVE-2022-0198
Corenlp
Corenlp
The issue is related to Improper Restriction of XML External Entity Reference. The `TransformXML()` function uses a `SAXParser` generated from a `SAXParserFactory` with no `FEATURE SECURE PROCESSING` set, allowing for XXE attacks.