Description jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE. Remediation References https://github.com/pippo-java/pippo/issues/486 Related Vulnerabilities CVE-2020-15096 Vulnerability in npm package electron CVE-2020-1938 Vulnerability in maven package org.apache.tomcat:tomcat-coyote CVE-2018-5673 Vulnerability in maven package org.webjars:dojo CVE-2023-46120 Vulnerability in maven package com.rabbitmq:amqp-client CVE-2020-7770 Vulnerability in npm package json8 Severity Critical Classification CWE-611 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Exploit Issue Tracking Third Party Advisory