https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:19:56 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-01085 cnvd-2018-01085 https://cve.radiocsirt.org/vuln/cnvd-2018-01085 https://cve.radiocsirt.org/vuln/euvd-2026-74768 EUVD-2026-74768 https://cve.radiocsirt.org/vuln/euvd-2026-74768 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7545 <p>It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.</p> <p>It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-7545 https://cve.radiocsirt.org/vuln/ghsa-vc3x-72q4-g3p5 <p><strong>Affected:</strong> Maven: org.jbpm.jbpm5:jbpmmigration</p> <p>It was discovered that the XmlUtils class in jbpmmigration performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.</p> <p>The related jbpm-designer project removed use of jbpmmigration completely as a result.</p> <p><strong>Affected:</strong> Maven: org.jbpm.jbpm5:jbpmmigration</p> <p>It was discovered that the XmlUtils class in jbpmmigration performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.</p> <p>The related jbpm-designer project removed use of jbpmmigration completely as a result.</p> https://cve.radiocsirt.org/vuln/ghsa-vc3x-72q4-g3p5 https://cve.radiocsirt.org/vuln/gsd-2017-7545 gsd-2017-7545 https://cve.radiocsirt.org/vuln/gsd-2017-7545 https://cve.radiocsirt.org/vuln/rhsa-2017:3354 <p>zookeeper: Incorrect input validation with wchp/wchc four letter words jbpmmigration: XXE vulnerability in XmlUtils</p> <p>zookeeper: Incorrect input validation with wchp/wchc four letter words jbpmmigration: XXE vulnerability in XmlUtils</p> https://cve.radiocsirt.org/vuln/rhsa-2017:3354