Description
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
Remediation
References
https://github.com/stanfordnlp/corenlp/commit/1940ffb938dc4f3f5bc5f2a2fd8b35aabbbae3dd
https://huntr.dev/bounties/a717aec2-5646-4a5f-ade0-dadc25736ae3
Related Vulnerabilities
CVE-2023-49371 Vulnerability in maven package com.ruoyi:ruoyi
CVE-2020-35215 Vulnerability in maven package io.atomix:atomix
CVE-2022-41930 Vulnerability in maven package org.xwiki.platform:xwiki-platform-user-profile-ui
CVE-2022-45391 Vulnerability in maven package io.jenkins.plugins:cavisson-ns-nd-integration
CVE-2017-2603 Vulnerability in maven package org.jenkins-ci.main:jenkins-core