Описание
Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | introduced in 2.0.14 |
| cosmic | not-affected | introduced in 2.0.14 |
| devel | not-affected | introduced in 2.0.14 |
| esm-apps-legacy/xenial | not-affected | introduced in 2.0.14 |
| esm-apps/bionic | not-affected | introduced in 2.0.14 |
| esm-apps/xenial | not-affected | introduced in 2.0.14 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [introduced in 2.0.14]] |
| precise/esm | DNE | |
| trusty | not-affected | introduced in 2.0.14 |
| trusty/esm | DNE | trusty was not-affected [introduced in 2.0.14] |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | introduced in 2.0.14 |
| cosmic | not-affected | introduced in 2.0.14 |
| devel | not-affected | introduced in 2.0.14 |
| esm-apps/bionic | not-affected | introduced in 2.0.14 |
| esm-infra-legacy/trusty | DNE | |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | not-affected | debian: Vulnerable code introduced in 2.0.14 |
| xenial | DNE |
Показывать по
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.
Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.
Apache PDFBox 2.0.14 does not properly initialize the XML parser, whic ...
Vulnerability that affects org.apache.pdfbox:pdfbox
Уязвимость синтаксического анализатора XML Java-библиотеки Apache PDFBox, позволяющая нарушителю проводить XXE-атаки
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3