Description
XXE issue in Airsonic before 10.1.2 during parse.
Remediation
References
https://github.com/airsonic/airsonic/blob/master/CHANGELOG.md
https://github.com/airsonic/airsonic/releases/tag/v10.2.1
Related Vulnerabilities
CVE-2020-1731 Vulnerability in maven package org.keycloak:keycloak-core
CVE-2021-21290 Vulnerability in maven package io.netty:netty-transport
CVE-2020-2169 Vulnerability in maven package org.jenkins-ci.plugins:queue-cleanup
CVE-2023-37914 Vulnerability in maven package org.xwiki.platform:xwiki-platform-invitation-ui
CVE-2019-0212 Vulnerability in maven package org.apache.hbase:hbase-rest