CVE-2014-125087CWE-611

java-xmlbuilder xml external entity reference

Medium · published February 19, 2023

CVSS v3.1
5.5
EPSS
1%
Percentile
68.8
In the wild
Unconfirmed
What it is

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is e6fddca201790abab4f2c274341c0bb8835c3e73. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221480.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01241 · 68.8th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2023-02-19T16:31Z
EPSS history
Timeline
  • 19 FEB 16:31Z
    java-xmlbuilder xml external entity reference
    cvelistv5