Description
XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Remediation
References
http://www.securityfocus.com/bid/91717
https://helpx.adobe.com/security/products/xmpcore/apsb16-24.html
Related Vulnerabilities
CVE-2022-2216 Vulnerability in maven package org.webjars.npm:parse-url
CVE-2017-12617 Vulnerability in maven package org.apache.tomcat:catalina
CVE-2023-29514 Vulnerability in maven package org.xwiki.platform:xwiki-platform-administration-ui
CVE-2023-32314 Vulnerability in maven package org.webjars.npm:vm2
CVE-2021-21266 Vulnerability in maven package org.openhab.addons.bundles:org.openhab.binding.enigma2