Product

com.github.binarywang/weixin-java-common vulnerabilities

1 published CVE affecting com.github.binarywang/weixin-java-common, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 1
High: 0
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest com.github.binarywang/weixin-java-common CVEs

Newest publication first

CVE-2019-5312 XML External Entity Reference in weixin-java-tools
Published 2019-01-04

CriticalCVSS 9.8

An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

com.github.binarywang/weixin-java-common vulnerabilities

Latest com.github.binarywang/weixin-java-common CVEs

CVE-2019-5312 XML External Entity Reference in weixin-java-tools