zhutougg

1 exploit Active since Dec 2018
CVE-2018-20433 WRITEUP CRITICAL WRITEUP
Mchange C3p0 < 0.9.5.3 - XXE
c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization.
CVSS 9.8