CVE-2024-28168
Apache XML Graphics FOP: XML External Entity (XXE) Processing
Summary
Apache XML Graphics FOP: XML External Entity (XXE) Processing
Original description
The description as published by the source.
Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP.
This issue affects Apache XML Graphics FOP: 2.9.
Users are recommended to upgrade to version 2.10, which fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-28168 fop
- Ubuntu UBUNTU-CVE-2024-28168 fop
References
- advisory github.com
- advisory nvd.nist.gov
- advisory xmlgraphics.apache.org
- web openwall.com