Unrated
An XXE issue exists in Accenture Mercury before 1.12.28 because of the platformlambda/core/serializers/SimpleXmlParser.java component.
CVE-2020-10990
First seen on SecPulse
References
- advisory github.com
- patch github.com