BIT-java-2024-40896
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/java/BIT-java-2024-40896.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/BIT-java-2024-40896
- Aliases
- Published
- 2026-05-06T14:44:52.133Z
- Modified
- 2026-05-08T07:56:29.685554361Z
- Summary
- [none]
- Details
-
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.
- Database specific
{ "severity": "Critical", "cpes": [ "cpe:2.3:a:bellsoft:libericajdk:*:*:*:*:*:*:*:*" ] }- References
Affected packages
Bitnami / java
Package
- Name
- java
- Purl
- pkg:bitnami/java
Severity
- 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator