Description

Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.

Remediation

References

https://huntr.dev/bounties/0d093863-29e8-4dd7-a885-64f76d50bf5e

https://github.com/skylot/jadx/commit/d22db30166e7cb369d72be41382bb63ac8b81c52

Related Vulnerabilities

CVE-2021-39171 Vulnerability in npm package passport-saml

CVE-2020-7788 Vulnerability in maven package org.webjars.bowergithub.npm:ini

CVE-2021-29469 Vulnerability in npm package redis

CVE-2023-49804 Vulnerability in npm package uptime-kuma

CVE-2023-34232 Vulnerability in npm package snowflake-sdk

Severity

Medium

Classification

CWE-611 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Tags

Exploit Issue Tracking Patch Third Party Advisory