CVE-2018-20059

CVSS v3.0 9.8 (Critical)

CVSS v2.0 7.5 (High)

EPSS 0.39 % (74^th)

Affected Products 1

Advisories 1

jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.

Weaknesses

CWE-611: Improper Restriction of XML External Entity Reference

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2018-12-11 10:29:00
(5 years ago)
Updated Date: 2019-01-03 16:15:00
(5 years ago)

Affected Products

Pippo

Pippo

Configuration #1

		CPE23	From	Up To
	Pippo 1.11.0	cpe:2.3:a:pippo:pippo:1.11.0