CVE-2022-0239

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security@huntr.dev

Published

2022-01-17

Last modified

2024-08-23

Weaknesses

CWE-611

Affected products

• Corenlp (Stanford)
• Stanfordnlpcorenlp (Stanfordnlp)

References

• https://github.com/stanfordnlp/corenlp/commit/1940ffb938dc4f3f5bc5f2a2fd8b35aabbbae3dd
• https://huntr.dev/bounties/a717aec2-5646-4a5f-ade0-dadc25736ae3