Lucene search
Veracode Vulnerability DatabaseVERACODE:8058HistoryDec 21, 2018 - 3:36 a.m.
XML External Entity Injection (XXE)
2018-12-2103:36:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.002
Percentile
61.3%
Fess is vulnerable to XML external entity injection (XXE). The library does not prevent the GSA XML file parser from processing the malicious GSA XML files injected by the attacker.
Related
cvelist
cvelist
CVE-2018-1000822
2018-12-20 15:00:00
osv
osv
CVE-2018-1000822
2018-12-20 15:29:00
XML External Entity (XXE) vulnerability in codelibs fess
2018-12-20 22:02:09
nvd
nvd
CVE-2018-1000822
2018-12-20 15:29:00
prion
prion
Xxe
2018-12-20 15:29:00
github
github
XML External Entity (XXE) vulnerability in codelibs fess
2018-12-20 22:02:09
cve
cve
CVE-2018-1000822
2018-12-20 15:29:00