Description jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE. Remediation References https://github.com/pippo-java/pippo/issues/486 Related Vulnerabilities CVE-2022-21122 Vulnerability in npm package metacalc CVE-2021-46361 Vulnerability in maven package info.magnolia:magnolia-core CVE-2021-23363 Vulnerability in npm package kill-by-port CVE-2023-37912 Vulnerability in maven package org.xwiki.rendering:xwiki-rendering-macro-footnotes CVE-2023-50710 Vulnerability in npm package hono Severity Critical Classification CWE-611 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Exploit Issue Tracking Third Party Advisory