Description
XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspecified other impact via crafted XML data.
Remediation
References
Related Vulnerabilities
MySQL CVE-2015-4910 Vulnerability (CVE-2015-4910)
WordPress Plugin AB Press Optimizer Multiple Cross-Site Scripting Vulnerabilities (1.1.1)
WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk Cross-Site Scripting (5.21)
Grafana Cleartext Storage of Sensitive Information Vulnerability (CVE-2022-26148)
WordPress Plugin Advanced Custom Fields (ACF) PHP Object Injection (5.7.10)