Maven/be.e_contract.dssp:dssp-client CVE-2016-15011: critical 9.8, EPSS 0.77%
dssp vulnerable to Improper Restriction of XML External Entity Reference
Action: Upgrade be.e_contract.dssp:dssp-client to 1.3.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.2 | - |
Fixed versions
| 1.3.2 |
Sources
- osv: GHSA-77cc-w3wm-6whp
- https://nvd.nist.gov/vuln/detail/CVE-2016-15011
- https://github.com/e-Contract/dssp/commit/ec4238349691ec66dd30b416ec6eaab02d722302
- https://github.com/e-Contract/dssp
- https://github.com/e-Contract/dssp/releases/tag/dssp-1.3.2
- https://vuldb.com/?ctiid.217549
- https://vuldb.com/?id.217549
CVE-2016-15011 · published · modified · JSON