Description
XXE issue in Airsonic before 10.1.2 during parse.
Remediation
References
https://github.com/airsonic/airsonic/blob/master/CHANGELOG.md
https://github.com/airsonic/airsonic/releases/tag/v10.2.1
Related Vulnerabilities
CVE-2019-18213 Vulnerability in maven package org.lsp4xml:org.eclipse.lsp4xml.extensions.web
CVE-2018-25031 Vulnerability in maven package org.webjars:swagger-ui
CVE-2022-45689 Vulnerability in maven package cn.hutool:hutool-json
CVE-2022-21211 Vulnerability in npm package posix
CVE-2018-1284 Vulnerability in maven package org.apache.hive:hive-exec