CVE-2020-36640

Maven/org.bonitasoft.connectors:bonita-connector-webservice CVE-2020-36640: critical 9.8, EPSS 0.80%

bonita-connector-webservice XML External Entity vulnerability

Action: Upgrade org.bonitasoft.connectors:bonita-connector-webservice to 1.3.1 or later.

Affected

Fixed versions

Sources

• osv: GHSA-wg99-5vrx-j2gg
• https://nvd.nist.gov/vuln/detail/CVE-2020-36640
• https://github.com/bonitasoft/bonita-connector-webservice/pull/17
• https://github.com/bonitasoft/bonita-connector-webservice/commit/a12ad691c05af19e9061d7949b6b828ce48815d5
• https://github.com/bonitasoft/bonita-connector-webservice
• https://github.com/bonitasoft/bonita-connector-webservice/releases/tag/1.3.1
• https://vuldb.com/?ctiid.217443
• https://vuldb.com/?id.217443

CVE-2020-36640 · published 2023-01-05T12:30:28Z · modified 2023-11-08T04:03:48.713964Z · JSON