Maven/com.predic8:soa-model-parent CVE-2021-43090: critical 9.8, EPSS 1.93%

Improper Restriction of XML External Entity Reference in soa-model

Action: Upgrade com.predic8:soa-model-parent to 1.6.4 or later.

Affected

Fixed versions

Sources

• osv: GHSA-pv39-qp28-4mgh
• https://nvd.nist.gov/vuln/detail/CVE-2021-43090
• https://github.com/membrane/soa-model/issues/281
• https://github.com/membrane/soa-model/commit/19de16902468e7963cc4dc6b544574bc1ea3f251
• https://github.com/membrane/soa-model/commit/3aa295f155f621d5ea661cb9a0604013fc8fd8ff
• https://github.com/membrane/soa-model
• https://github.com/membrane/soa-model/releases/tag/v1.6.4

CVE-2021-43090 · published 2022-03-26T00:00:32Z · modified 2023-11-08T04:07:08.673319Z · JSON