Description
An XML External Entity (XXE) vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput.
Remediation
References
https://novysodope.github.io/2021/10/29/64/
Related Vulnerabilities
CVE-2019-13343 Vulnerability in maven package com.butor:portal
CVE-2016-10735 Vulnerability in maven package org.webjars.npm:bootstrap
CVE-2022-0272 Vulnerability in maven package io.gitlab.arturbosch.detekt:detekt-core
CVE-2022-35961 Vulnerability in npm package @openzeppelin/contracts-upgradeable
CVE-2020-7740 Vulnerability in npm package node-pdf-generator