Withdrawn Advisory: dom4j XML Entity Expansion vulnerability
Moderate severity
GitHub Reviewed
Published
Oct 25, 2023
to the GitHub Advisory Database
•
Updated Nov 9, 2023
Withdrawn
This advisory was withdrawn on Oct 31, 2023
Description
Published by the National Vulnerability Database
Oct 25, 2023
Published to the GitHub Advisory Database
Oct 25, 2023
Reviewed
Oct 27, 2023
Withdrawn
Oct 31, 2023
Last updated
Nov 9, 2023
Credits
-
carlosame Analyst
Withdrawn Advisory
This advisory has been withdrawn because the underlying vulnerability could not be reproduced. This link is maintained to preserve external references.
Original Description
An issue in dom4.j org.dom4.io.SAXReader v.2.1.4 and before allows a remote attacker to obtain sensitive information via the setFeature function.
References