Описание
Security update for jgraphx
This update for jgraphx fixes the following issues:
Security issue fixed:
- CVE-2017-18197: Fixed missing flags in SAXParserFactory instance in convert() to prevent XML External Entity (XXE) attacks (boo#1083413).
Список пакетов
openSUSE Leap 42.3
jgraphx-3.1.2.1-7.3.1
Ссылки
- E-Mail link for openSUSE-SU-2018:0616-1
- SUSE Security Ratings
Описание
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView.
Затронутые продукты
openSUSE Leap 42.3:jgraphx-3.1.2.1-7.3.1
Ссылки
- CVE-2017-18197
- SUSE Bug 1083413