CVE-2020-36641CWE-611

gturri aXMLRPC ResponseParser.java ResponseParser xml external entity reference

Medium · published January 5, 2023

CVSS v3.1
5.5
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able to address this issue. The patch is identified as 456752ebc1ef4c0db980cb5b01a0b3cd0a9e0bae. It is recommended to upgrade the affected component. VDB-217450 is the identifier assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00883 · 58.8th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2023-01-05T11:29Z
EPSS history
Timeline
  • 05 JAN 11:29Z
    gturri aXMLRPC ResponseParser.java ResponseParser xml external entity reference
    cvelistv5