Описание
XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.
When performing XSLT transformations XMLUnit for Java did not disable XSLT extension functions by default. Depending on the XSLT processor being used this could allow arbitrary code to be executed when XMLUnit is used to transform data with a stylesheet who's source can not be trusted. If the stylesheet can be provided externally this may even lead to a remote code execution in the context of the java application.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat AMQ Broker 7 | xmlunit-core | Fix deferred | ||
| Red Hat AMQ Clients | xmlunit-core | Fix deferred | ||
| Red Hat build of Apache Camel for Spring Boot 4 | xmlunit-core | Fix deferred | ||
| Red Hat build of Apache Camel - HawtIO 4 | xmlunit-core | Fix deferred | ||
| Red Hat build of Apicurio Registry 2 | xmlunit-core | Fix deferred | ||
| Red Hat build of Apicurio Registry 3 | xmlunit-core | Fix deferred | ||
| Red Hat build of Debezium 2 | xmlunit-core | Fix deferred | ||
| Red Hat build of Debezium 3 | xmlunit-core | Fix deferred | ||
| Red Hat build of OptaPlanner 8 | xmlunit-core | Fix deferred | ||
| Red Hat Data Grid 8 | xmlunit-core | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
4 Medium
CVSS3
Связанные уязвимости
XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.
XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.
XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.
XMLUnit for Java before 2.10.0, in the default configuration, might al ...
XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets
EPSS
4 Medium
CVSS3