Lucene search
Veracode Vulnerability DatabaseVERACODE:33800HistoryJan 21, 2022 - 5:56 a.m.
XML External Entity (XXE)
2022-01-2105:56:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
xxe
jadx-core
exportgradleproject.java
documentbuilderfactory
androidmanifest file
gradle
EPSS
0.001
Percentile
33.4%
jadx-core is vulnerable to xml external entity attacks. The vulnerability exists in the parseXml function of ExportGradleProject.java as it does not set disallow-doctype-decl attribute in the DocumentBuilderFactory, allowing an attacker to export a malicious android application with a crafted AndroidManifest file to Gradle.
Related
osv
osv
Improper Restriction of XML External Entity Reference in skylot/jadx
2022-01-21 18:13:42
CVE-2022-0219
2022-01-20 17:15:18
prion
prion
Xxe
2022-01-20 17:15:00
cvelist
cvelist
nvd
nvd
CVE-2022-0219
2022-01-20 17:15:18
huntr
huntr
in skylot/jadx
2022-01-12 15:22:08
github
github
Improper Restriction of XML External Entity Reference in skylot/jadx
2022-01-21 18:13:42
githubexploit
githubexploit
cve
cve
CVE-2022-0219
2022-01-20 17:15:18