Description
An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file.
Remediation
References
https://github.com/Wechat-Group/weixin-java-tools/issues/889
Related Vulnerabilities
CVE-2021-23899 Vulnerability in maven package com.mikesamuel:json-sanitizer
CVE-2023-26487 Vulnerability in maven package org.webjars.bowergithub.vega:vega
CVE-2017-18077 Vulnerability in npm package brace-expansion
CVE-2020-26149 Vulnerability in npm package nats.ws
CVE-2020-11612 Vulnerability in maven package io.netty:netty-codec