Homepage

org.apache.cocoon:cocoon-core@2.2.0 vulnerabilities

  • latest version

    2.3.0

  • first published

    18 years ago

  • latest version published

    1 years ago

  • licenses detected

  • package manager

    View on Maven Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the org.apache.cocoon:cocoon-core package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Improper Restriction of XML External Entity Reference ('XXE')

    org.apache.cocoon:cocoon-core is a module that contains dependencies to all modules normally needed for a basic Cocoon webapp.

    Affected versions of this package are vulnerable to Improper Restriction of XML External Entity Reference ('XXE') through the StreamGenerator.java component. An attacker can read arbitrary files on the system or cause a denial of service by sending specially crafted XML data.

    How to fix Improper Restriction of XML External Entity Reference ('XXE')?

    Upgrade org.apache.cocoon:cocoon-core to version 2.3.0 or higher.

    [2.2.0,2.3.0)
    • H
    XML External Entity (XXE)

    org.apache.cocoon:cocoon-core is a module that contains dependencies to all modules normally needed for a basic Cocoon webapp.

    Affected versions of this package are vulnerable to XML External Entity (XXE). When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system.

    How to fix XML External Entity (XXE)?

    There is no fixed version for org.apache.cocoon:cocoon-core.

    [0,)
    Go back to all versions of this package