Improper Restriction of XML External Entity Reference in wutka jox
Date: 2022-04
Affected: maven/com.wutka:jox
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2021-43142
CWE: CWE-611

An XML External Entity (XXE) vulnerability exists in wutka jox 1.16 in the readObject method in JOXSAXBeanInput.


Mitigations:

Architectural layers (MAESTRO):