Description
Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.
Remediation
References
https://github.com/skylot/jadx/commit/d22db30166e7cb369d72be41382bb63ac8b81c52
https://huntr.dev/bounties/0d093863-29e8-4dd7-a885-64f76d50bf5e
Related Vulnerabilities
CVE-2019-12418 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2018-20677 Vulnerability in maven package org.webjars.npm:bootstrap-sass
CVE-2023-40037 Vulnerability in maven package org.apache.nifi:nifi-hikari-dbcp-service
CVE-2020-13936 Vulnerability in maven package org.apache.velocity:velocity-engine-core
CVE-2021-31684 Vulnerability in maven package net.minidev:json-smart