Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Angledluffa

#22490of 60,574
13.6Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2022-13058
2022-01-17
7.5
CVE-2022-0239
Corenlp
Corenlp
The issue is related to Improper Restriction of XML External Entity Reference. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.
PT-2022-13031
2022-01-13
6.1
CVE-2022-0198
Corenlp
Corenlp
The issue is related to Improper Restriction of XML External Entity Reference. The `TransformXML()` function uses a `SAXParser` generated from a `SAXParserFactory` with no `FEATURE SECURE PROCESSING` set, allowing for XXE attacks.