CVE-2024-34345

8.1HIGH

The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on a

Опубликовано: 5/14/2024Обновлено: 11/21/2024
Посмотреть на NVDПосмотреть на MITRE

Описание

The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML External entity injections were possible, when running the provided XML Validator on arbitrary input. This issue was fixed in version 6.7.1.

ИИ-АнализНа базе ИИ

Ссылки