Improper Restriction of XML External Entity Reference in pippo-core

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-20059 · ADVISORY
• pippo-java/pippo · WEB
• pippo-java/pippo commit 9f36e58 · WEB
• GitHub Advisory GHSA-rmm5-g63h-m6g9 · ADVISORY
• pippo-java/pippo · PACKAGE

Lỗ hổng khác của ro.pippo:pippo-core

• CVE-2018-18628NGHIÊM TRỌNG 9.8An issue was discovered in Pippo 1.11.0. The function SerializationSessionDataTranscoder.decode() calls ObjectInputStream.readObject() to de…
• CVE-2018-18240NGHIÊM TRỌNG 9.8Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use…