PT-2021-15602
CVE-2021-23901
·
تاريخ النشر
2021-01-25
·
تاريخ التحديث
2022-03-18
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Nutch versions prior to 1.18
Description:
An XML external entity (XXE) injection issue was discovered in the Nutch DmozParser. This issue allows an attacker to interfere with the application's processing of XML data, potentially enabling them to view files on the application server filesystem and interact with back-end or external systems that the application can access.
Recommendations:
For versions prior to 1.18, update to Apache Nutch 1.18 to resolve the issue. As a temporary workaround, consider restricting the use of the DmozParser until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾