Maven/org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli CVE-2024-52807: high 8.6, EPSS 0.56%
XXE vulnerability in XSLT parsing in `org.hl7.fhir.publisher`
Action: Upgrade org.hl7.fhir.publisher:org.hl7.fhir.publisher.cli to 1.7.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.4 | - |
Fixed versions
| 1.7.4 |
Sources
- osv: GHSA-8c3x-hq82-gjcm
- https://github.com/HL7/fhir-ig-publisher/security/advisories/GHSA-59rq-22fm-x8q5
- https://github.com/HL7/fhir-ig-publisher/security/advisories/GHSA-8c3x-hq82-gjcm
- https://nvd.nist.gov/vuln/detail/CVE-2024-52807
- https://github.com/HL7/fhir-ig-publisher/commit/3560de2f486d688a3ddcf4aa54d8bdacea380c3d
- https://github.com/HL7/fhir-ig-publisher
- https://github.com/HL7/fhir-ig-publisher/compare/1.7.3...1.7.4
CVE-2024-52807 · published · modified · JSON