CVE-2024-51135

An XML External Entity (XXE) vulnerability in the component DocumentBuilderFactory of powertac-server v1.9.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - cve@mitre.org

Published

2024-11-11

Last modified

2024-11-12

Weaknesses

CWE-79

Affected products

• Powertac-server (Powertac-server)

References

• http://www.powertac.org/
• https://github.com/powertac/powertac-server
• https://github.com/powertac/powertac-server/issues/1166
• https://mvnrepository.com/artifact/org.powertac/server-interface