CVE-2017-20151
A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xml external entity reference. The patch is identified as ac5590925874ef810018a6b60fec216eee54fb32. It is recommended to apply a patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cna@vuldb.com
- Published
- 2022-12-30
- Last modified
- 2024-08-05
- Weaknesses
- CWE-611
Affected products
References
- https://github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32
- https://vuldb.com/?ctiid.217054
- https://vuldb.com/?id.217054