Description
Improper Restriction of XML External Entity Reference in GitHub repository liquibase/liquibase prior to 4.8.0.
Remediation
References
https://github.com/liquibase/liquibase/commit/33d9d925082097fb1a3d2fc8e44423d964cd9381
https://huntr.dev/bounties/f1ae5779-b406-4594-a8a3-d089c68d6e70
https://www.oracle.com/security-alerts/cpujul2022.html
Related Vulnerabilities
CVE-2019-9142 Vulnerability in maven package org.b3log:symphony
CVE-2023-36478 Vulnerability in maven package org.eclipse.jetty:jetty-http
CVE-2016-6794 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2015-3253 Vulnerability in maven package org.codehaus.groovy:groovy-all
CVE-2023-46233 Vulnerability in maven package org.webjars.npm:github-com-brix-crypto-js