Most recent entries from all

cnvd-2018-05847

EUVD-2026-79996

fkie_cve-2017-18197

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView.

GHSA-wvpv-8524-wg6x — mxGraph vulnerable to XXE attacks

Affected: npm: mxgraph

In `mxGraphViewImageReader.java` in mxGraph before 3.7.6, the `SAXParserFactory` instance in `convert()` is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by `/ServerView`.

gsd-2017-18197

openSUSE-SU-2024:10879-1 — jgraphx-3.9.2-1.9 on GA media

jgraphx-3.9.2-1.9 on GA media

UBUNTU-CVE-2017-18197

Affected: Ubuntu:16.04:LTS: libjgraphx-java, Ubuntu:18.04:LTS: libjgraphx-java

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView.