CVE-2021-33813
An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.
Original description
The description as published by the source.
An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
solr
[{"type":"SEMVER","events":[{"introduced":"8.8.1"},{"fixed":"8.8.2"},{"introduced":"8.9.0"},{"fixed":"8.9.1"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-33813 libjdom1-java Fixed in: 1.1.3-2.1
- Ubuntu UBUNTU-CVE-2021-33813 libjdom1-java
References
- advisory alephsecurity.com
- advisory github.com
- advisory github.com
- advisory lists.debian.org
- advisory lists.debian.org
- advisory oracle.com
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.apache.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web oracle.com
- web nvd.nist.gov