Apache Commons Jelly (Apache Software Foundation) - vulnerabilities (CVEs)
1 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2017-09-28. Vendor: Apache Software Foundation.
CVEs of Apache Commons Jelly
- CVE-2017-12621 - CVSS 9.8 (critical), 2017-09-28: During Jelly (xml) file parsing with Apache Xerces, if a custom doctype entity is declared with a "SYSTEM" entity with a URL and that entity is used in the…
