Improper Restriction of XML External Entity Reference in pippo-core

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-20059 · ADVISORY
• pippo-java/pippo · WEB
• pippo-java/pippo commit 9f36e58 · WEB
• GitHub Advisory GHSA-rmm5-g63h-m6g9 · ADVISORY
• pippo-java/pippo · PACKAGE

Weitere Schwachstellen in ro.pippo:pippo-core

• CVE-2018-18628KRITISCH 9.8An issue was discovered in Pippo 1.11.0. The function SerializationSessionDataTranscoder.decode() calls ObjectInputStream.readObject() to de…
• CVE-2018-18240KRITISCH 9.8Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use…