Описание
Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 1:1.8.12-1 |
| bionic | not-affected | 1:1.8.12-1 |
| cosmic | not-affected | 1:1.8.12-1 |
| devel | not-affected | 1:1.8.12-1 |
| disco | not-affected | 1:1.8.12-1 |
| eoan | not-affected | 1:1.8.12-1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | 1:1.8.12-1 |
| esm-apps/focal | not-affected | 1:1.8.12-1 |
| esm-apps/jammy | not-affected | 1:1.8.12-1 |
Показывать по
EPSS
7.5 High
CVSS2
7.8 High
CVSS3
Связанные уязвимости
Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF.
Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF.
Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly ini ...
High severity vulnerability that affects org.apache.pdfbox:pdfbox
EPSS
7.5 High
CVSS2
7.8 High
CVSS3