ClassGraph XML External Entity Reference
Date: 2024-06
Affected: maven/io.github.classgraph:classgraph
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2021-47621
CWE: CWE-611
CVSS: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)

ClassGraph before 4.8.112 was not resistant to XML eXternal Entity (XXE) attacks.


Mitigations:

Architectural layers (MAESTRO):