CVE-2017-20151 iText RUPS XfaFile.java xml external entity reference
CriticalCVSS 9.8
EPSS 0.82%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xml external entity reference. The patch is identified as ac5590925874ef810018a6b60fec216eee54fb32. It is recommended to apply a patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| com.itextpdf/itext-rups(Maven) | <= 7.0.1 | No fix listed |
| itextpdf rups | < 2017-08-01 | 2017-08-01 |
| ubuntu/libitext-java(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/libitext-java(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/libitext-java(Ubuntu:26.10) | All versions | No fix listed |
| iText RUPS | All versions | No fix listed |
| ubuntu/libitext-java(Ubuntu:22.04) | All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- vuldb.com permissions-required signature third-party-advisory
- vuldb.com technical-description third-party-advisory vdb-entry
- github.com
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- github.com product