Description

XXE issue in Airsonic before 10.1.2 during parse.

Remediation

References

https://github.com/airsonic/airsonic/blob/master/CHANGELOG.md

https://github.com/airsonic/airsonic/releases/tag/v10.2.1

Related Vulnerabilities

CVE-2021-21294 Vulnerability in maven package org.http4s:http4s-blaze-server_2.13

CVE-2020-11022 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery

CVE-2021-43138 Vulnerability in maven package org.webjars.npm:async

CVE-2022-24999 Vulnerability in maven package org.webjars.bower:qs

CVE-2020-6449 Vulnerability in npm package electron

Severity

Critical

Classification

CWE-611 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Release Notes Third Party Advisory