Description

Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.

Remediation

References

https://github.com/skylot/jadx/commit/d22db30166e7cb369d72be41382bb63ac8b81c52

https://huntr.dev/bounties/0d093863-29e8-4dd7-a885-64f76d50bf5e

Related Vulnerabilities

CVE-2020-1938 Vulnerability in maven package org.apache.tomcat:coyote

CVE-2021-21266 Vulnerability in maven package org.openhab.addons.bundles:org.openhab.transform.xpath

CVE-2023-47323 Vulnerability in maven package org.silverpeas.core:silverpeas-core-web

CVE-2021-26541 Vulnerability in npm package gitlog

CVE-2019-0205 Vulnerability in npm package thrift

Severity

Medium

Classification

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Tags

Patch Third Party Advisory Exploit Issue Tracking NVD-CWE-noinfo