Withdrawn Advisory: dom4j XML Entity Expansion vulnerability
Date: 2023-10
Affected: maven/org.dom4j:dom4j
Attack vector: info-disclosure
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2023-45960
CWE: CWE-776

## Withdrawn Advisory This advisory has been withdrawn because [the underlying vulnerability could not be reproduced](https://github.com/joker-xiaoyan/XXE-SAXReader/issues/1#issuecomment-1783780581). This link is maintained to preserve external references. ## Original Description An issue in dom4.j org.dom4.io.SAXReader v.2.1.4 and before allows a remote attacker to obtain sensitive information via the setFeature function.


Mitigations:

Architectural layers (MAESTRO):