Description jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE. Remediation References https://github.com/pippo-java/pippo/issues/486 Related Vulnerabilities CVE-2021-23463 Vulnerability in maven package com.h2database:h2 CVE-2017-14949 Vulnerability in maven package org.restlet.osgi:org.restlet CVE-2023-48087 Vulnerability in maven package com.xuxueli:xxl-job-admin CVE-2023-34620 Vulnerability in maven package org.hjson:hjson CVE-2020-8178 Vulnerability in npm package jison Severity Critical Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Exploit Issue Tracking Third Party Advisory CWE-611