Description
jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.
Remediation
References
https://github.com/pippo-java/pippo/issues/486
Related Vulnerabilities
CVE-2023-45648 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2022-39299 Vulnerability in npm package @node-saml/node-saml
CVE-2022-36092 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore
CVE-2020-8127 Vulnerability in npm package reveal.js
CVE-2022-31175 Vulnerability in npm package @ckeditor/ckeditor5-html-support