CVE-2024-31573

Опубликовано: 17 окт. 2025

Источник: nvd

CVSS3: 4

EPSS Низкий

Описание

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.

Ссылки

EPSS

Процентиль: 13%

0.00221

Низкий

4 Medium

CVSS3

Дефекты

CWE-669

Связанные уязвимости

CVE-2024-31573

CVSS3: 4

ubuntu

10 месяцев назад

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.

CVE-2024-31573

CVSS3: 4

redhat

10 месяцев назад

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.

CVE-2024-31573

msrc

10 месяцев назад

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.

CVE-2024-31573

CVSS3: 4

debian

10 месяцев назад

XMLUnit for Java before 2.10.0, in the default configuration, might al ...

GHSA-chfm-68vv-pvw5

github

больше 2 лет назад

XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets

EPSS

Процентиль: 13%

0.00221

Низкий

4 Medium

CVSS3

Дефекты

CWE-669