Debian/libxalan2-java: unknown
The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expe
Action: Upgrade libxalan2-java to 2.7.1-9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.1-9 | - |
Fixed versions
| 2.7.1-9 |
Sources
published · modified · JSON