Apache JClouds XML entity expansion flaw, no fix planned
A Java cloud integration library has a risky XML handling flaw.
Summary
Apache JClouds has an XML entity expansion flaw in DTD handling, affecting all versions. The project is retired, so no fixed version will be released.
What to do
No fixed version will be released because the project is retired. Find an alternative, or restrict access to the instance to trusted users.
Products and platforms
CVE IDs
Sources
- Advisory: lists.apache.org (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen