Security Advisory

CVE-2019-0228

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-04-17 14:07:34
Last updated 2024-08-04 17:44:15
Assigner apache
State PUBLISHED

Description

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.