Description
XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Remediation
References
http://www.securityfocus.com/bid/91717
https://helpx.adobe.com/security/products/xmpcore/apsb16-24.html
Related Vulnerabilities
CVE-2022-0087 Vulnerability in npm package @keystone-6/auth
CVE-2022-29577 Vulnerability in maven package org.owasp.antisamy:antisamy
CVE-2007-5333 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2022-23540 Vulnerability in npm package jsonwebtoken
CVE-2017-7661 Vulnerability in maven package org.apache.cxf.fediz:fediz-spring2