CVE-2021-43142

Name of the Vulnerable Software and Affected Versions wuta jox version 1.16

Description An XML External Entity (XXE) vulnerability exists in the readObject method in JOXSAXBeanInput. This issue allows for the exploitation of XML external entities, potentially leading to unauthorized access to sensitive data. The readObject method is vulnerable, specifically in the context of JOXSAXBeanInput.

Recommendations For wuta jox version 1.16, consider disabling the readObject method in JOXSAXBeanInput until a patch is available to prevent potential exploitation of the XXE vulnerability. Restrict access to the JOXSAXBeanInput module to minimize the risk of exploitation. Avoid using the readObject method in the affected JOXSAXBeanInput class until the issue is resolved.