CVE-2020-36641
1 advisory.
Maven/fr.turri:aXMLRPC CVE-2020-36641: critical 9.8, EPSS 0.88%
aXMLRPC XML External Entity vulnerability
Action: Upgrade fr.turri:aXMLRPC to 1.12.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.1 | - |
Fixed versions
| 1.12.1 |
Sources
- osv: GHSA-g4r8-28fp-f255
- https://nvd.nist.gov/vuln/detail/CVE-2020-36641
- https://github.com/gturri/aXMLRPC/commit/456752ebc1ef4c0db980cb5b01a0b3cd0a9e0bae
- https://github.com/gturri/aXMLRPC/commit/ad6615b3ec41353e614f6ea5fdd5b046442a832b
- https://github.com/gturri/aXMLRPC
- https://github.com/gturri/aXMLRPC/releases/tag/aXMLRPC-1.12.1
- https://github.com/gturri/aXMLRPC/releases/tag/aXMLRPC-1.14.0
- https://vuldb.com/?ctiid.217450
- https://vuldb.com/?id.217450
CVE-2020-36641 · published · modified · JSON