Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gw5f-7fqh-pvm6

Опубликовано: 16 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.1
CVSS3: 6.3

Описание

A vulnerability was determined in opencc JFlow up to 20260129. This affects the function Imp_Done of the file src/main/java/bp/wf/httphandler/WF_Admin_AttrFlow.java of the component Workflow Engine. This manipulation of the argument File causes xml external entity reference. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was determined in opencc JFlow up to 20260129. This affects the function Imp_Done of the file src/main/java/bp/wf/httphandler/WF_Admin_AttrFlow.java of the component Workflow Engine. This manipulation of the argument File causes xml external entity reference. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

EPSS

Процентиль: 10%
0.00031
Низкий

2.1 Low

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-610

Связанные уязвимости

CVSS3: 6.3
nvd
4 месяца назад

A vulnerability was determined in opencc JFlow up to 20260129. This affects the function Imp_Done of the file src/main/java/bp/wf/httphandler/WF_Admin_AttrFlow.java of the component Workflow Engine. This manipulation of the argument File causes xml external entity reference. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

EPSS

Процентиль: 10%
0.00031
Низкий

2.1 Low

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-610