Product

com.github.wxpay/wxpay-sdk vulnerabilities

1 published CVE affecting com.github.wxpay/wxpay-sdk, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest com.github.wxpay/wxpay-sdk CVEs

Newest publication first

CVE-2018-13439 WeChat Pay Java SDK allows XXE
Published 2018-07-08

HighCVSS 7.5 EPSS 1.9% Public exploit

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

com.github.wxpay/wxpay-sdk vulnerabilities

Latest com.github.wxpay/wxpay-sdk CVEs

CVE-2018-13439 WeChat Pay Java SDK allows XXE