CVE-2023-45960

ADVISORY - github

Summary

This advisory has been withdrawn because the underlying vulnerability could not be reproduced. This link is maintained to preserve external references.

An issue in dom4.j org.dom4.io.SAXReader v.2.1.4 and before allows a remote attacker to obtain sensitive information via the setFeature function.

ADVISORY - nist

ADVISORY - github

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.