CVE-2020-36641

MEDIUM

gturri aXMLRPC <1.14.0 - XML External Entity Reference

Title source: llm
STIX 2.1

Description

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able to address this issue. The patch is identified as 456752ebc1ef4c0db980cb5b01a0b3cd0a9e0bae. It is recommended to upgrade the affected component. VDB-217450 is the identifier assigned to this vulnerability.

References (4)

Core 4
Core References
Permissions Required, Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.217450
Permissions Required, Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.217450

Scores

CVSS v3 5.5
EPSS 0.0084
EPSS Percentile 53.2%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-611
Status published
Products (2)
fr.turri/aXMLRPC 0 - 1.12.1Maven
gturri/axmlrpc < 1.12.1
Published Jan 05, 2023
Tracked Since Feb 18, 2026