Debian/jabref: critical 10
JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery
Action: Upgrade jabref to 3.8.2+ds-12 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.8.2+ds-12 | - |
Fixed versions
| 3.8.2+ds-12 |
Sources
published · modified · JSON