Beveiligingsadvies

CVE-2024-34345

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-09 14:56:07
Laatst bijgewerkt 2024-08-02 02:51:09
Toegewezen door GitHub_M
CVSS-score 8.1
Status PUBLISHED

Beschrijving

The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1.