Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gq3w-xqf6-838r

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

EPSS

Процентиль: 59%
0.00379
Низкий

Связанные уязвимости

redhat
около 11 лет назад

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

nvd
около 11 лет назад

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

EPSS

Процентиль: 59%
0.00379
Низкий