| Package | Affected versions | Patched versions |
|---|---|---|
| cocoon | ≥ 2.1, ≤ 2.1.12 |
When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free