Skip to content

Product

apache commons jelly vulnerabilities

1 published CVE affecting apache commons jelly, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest apache commons jelly CVEs

Newest publication first

  1. CVE-2017-12621 Improper Restriction of XML External Entity Reference in Jelly

    Published
    CriticalCVSS 9.8 EPSS 8.1%

    During Jelly (xml) file parsing with Apache Xerces, if a custom doctype entity is declared with a "SYSTEM" entity with a URL and that entity is used in the body of the Jelly file, during parser instantiation the parser will attempt to connect to said URL. This could lead to XML E...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.