Description

An XML External Entity (XXE) vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput.

Remediation

References

https://novysodope.github.io/2021/10/29/64/

Related Vulnerabilities

CVE-2023-30531 Vulnerability in maven package org.jenkins-ci.plugins:consul-kv-builder

CVE-2021-25864 Vulnerability in npm package node-red-contrib-huemagic

CVE-2022-41253 Vulnerability in maven package org.jenkins-ci.plugins:cons3rt

CVE-2020-2131 Vulnerability in maven package org.jenkins-ci.plugins:harvest

CVE-2020-28448 Vulnerability in npm package multi-ini

Severity

Critical

Classification

CWE-611 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory