Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:copernik:copernik-Xml-Factory:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Copernik XML Factory XInclude Resource Resolution Vulnerability

Copernik XML Factory versions prior to 0.1.2 fail to restrict XInclude resource resolution when using the stock JDK provider, enabling local file disclosure or SSRF via malicious XML inputs.

copernik-xml-factory vulnerability java xml
1t