CVE-2021-23901
1 advisory.
Maven/org.apache.nutch:nutch CVE-2021-23901: critical 9.1, EPSS 4.41%
XML external entity (XXE) injection in Apache Nutch
Action: Upgrade org.apache.nutch:nutch to 1.18 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.18 | - |
Fixed versions
| 1.18 |
Sources
- osv: GHSA-fxhp-wrw9-3r97
- https://nvd.nist.gov/vuln/detail/CVE-2021-23901
- https://github.com/apache/nutch/pull/563
- https://issues.apache.org/jira/browse/NUTCH-2841
- https://lists.apache.org/thread.html/r090321840b44cc91086c4e317bf2baffa270749dde6c1273b6567f7c%40%3Cdev.nutch.apache.org%3E
- https://lists.apache.org/thread.html/r5e2f7737b42c73a3325f3c2c8cdee1ec27631b3a0e144104d84d70e6@%3Cannounce.apache.org%3E
- https://lists.apache.org/thread.html/r7ddfd680aa7ea001ca8da63bb23e3f8caa095a8b4f2261e46bade5c7@%3Cdev.nutch.apache.org%3E
- https://security.netapp.com/advisory/ntap-20210513-0003
CVE-2021-23901 · published · modified · JSON