Lucene search
Veracode Vulnerability DatabaseVERACODE:36314HistoryJul 11, 2022 - 6:22 a.m.
XML External Entity (XXE)
2022-07-1106:22:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
xml external entity
xxe
org.eclipse.lyo.oslc4j.core
oslc4j-jena-provider
vulnerability
dtd document loading
rdf/xml formats
remote attackers
EPSS
0.001
Percentile
47.2%
org.eclipse.lyo.oslc4j.core:oslc4j-jena-provider is vulnerable to XML external entity attack. Default initialization of createTransformer does not restrict DTD document loading when working with RDF/XML formats, which allows remote attackers to retrieve external DTD documents.
Related
cvelist
cvelist
CVE-2021-41042
2022-07-07 20:55:10
cve
cve
CVE-2021-41042
2022-07-07 21:15:09
osv
osv
XML External Entity Reference in Eclipse Lyo
2022-07-08 00:00:42
prion
prion
Code injection
2022-07-07 21:15:00
github
github
XML External Entity Reference in Eclipse Lyo
2022-07-08 00:00:42
nvd
nvd
CVE-2021-41042
2022-07-07 21:15:09