https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T09:36:17.819002+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-25287 cnvd-2018-25287 2026-10-18T09:36:17.822333+00:00 cnvd-2018-25287 https://cve.radiocsirt.org/vuln/euvd-2026-168522 EUVD-2026-168522 2026-10-18T09:36:17.822374+00:00 EUVD-2026-168522 https://cve.radiocsirt.org/vuln/fkie_cve-2018-20000 fkie_cve-2018-20000 2026-10-18T09:36:17.822389+00:00

Apereo Bedework bw-webdav before 4.0.3 allows XXE attacks, as demonstrated by an invite-reply document that reads a local file, related to webdav/servlet/common/MethodBase.java and webdav/servlet/common/PostRequestPars.java.

 https://cve.radiocsirt.org/vuln/ghsa-5p52-j8pw-j7x5 GHSA-5p52-j8pw-j7x5 — Improper Restriction of XML External Entity Reference in bedework:bw-webdav 2026-10-18T09:36:17.822420+00:00

Affected: Maven: org.bedework:bw-webdav

Apereo Bedework bw-webdav before 4.0.3 allows XXE attacks, as demonstrated by an invite-reply document that reads a local file, related to webdav/servlet/common/MethodBase.java and webdav/servlet/common/PostRequestPars.java.

 https://cve.radiocsirt.org/vuln/gsd-2018-20000 gsd-2018-20000 2026-10-18T09:36:17.822443+00:00 gsd-2018-20000