Description
XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Remediation
References
http://www.securityfocus.com/bid/91717
https://helpx.adobe.com/security/products/xmpcore/apsb16-24.html
Related Vulnerabilities
CVE-2020-13410 Vulnerability in npm package aedes
CVE-2011-0013 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2022-46166 Vulnerability in maven package de.codecentric:spring-boot-admin-server
CVE-2019-15477 Vulnerability in maven package org.jooby:jooby
CVE-2011-1183 Vulnerability in maven package org.apache.tomcat:tomcat-catalina