Описание
Improper Restriction of XML External Entity Reference in skylot/jadx
skylot/jadx prior to 1.3.2 is vulnerable to Improper Restriction of XML External Entities when a user is tricked into exporting a malicious APK file (via the -e option) containing a crafted AndroidManifest.xml / strings.xml to gradle, leading to possible local file disclosure.
Пакеты
Наименование
io.github.skylot:jadx-core
maven
Затронутые версииВерсия исправления
< 1.3.2
1.3.2
Связанные уязвимости
CVSS3: 5.5
nvd
около 4 лет назад
Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.