Debian/dom4j: critical 9.8
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how
Action: Upgrade dom4j to 2.1.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.3-1 | - |
Fixed versions
| 2.1.3-1 |
Sources
- osv: DEBIAN-CVE-2020-10683#Debian:13/dom4j
- https://security-tracker.debian.org/tracker/CVE-2020-10683
published · modified · JSON