Improper Restriction of XML External Entity Reference in pippo-core

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-20059 · ADVISORY
• pippo-java/pippo · WEB
• pippo-java/pippo commit 9f36e58 · WEB
• GitHub Advisory GHSA-rmm5-g63h-m6g9 · ADVISORY
• pippo-java/pippo · PACKAGE

ro.pippo:pippo-core のその他の脆弱性

• CVE-2018-18628緊急 9.8An issue was discovered in Pippo 1.11.0. The function SerializationSessionDataTranscoder.decode() calls ObjectInputStream.readObject() to de…
• CVE-2018-18240緊急 9.8Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use…