CVE-2017-20151
1 advisory.
Maven/com.itextpdf:itext-rups CVE-2017-20151: critical 9.8
iText RUPS XML External Entity vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 7.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-j69f-fgh5-f7mc
- https://nvd.nist.gov/vuln/detail/CVE-2017-20151
- https://github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32
- https://github.com/itext/rups
- https://vuldb.com/?ctiid.217054
- https://vuldb.com/?id.217054
CVE-2017-20151 · published · modified · JSON