Not rated
CVE-2024-28168 Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP
Description
Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache XML Graphics FOP | 2.9 | No fix stated |
| xml_graphics_fop | 2.9 | No fix stated |
References
- xmlgraphics.apache.org xmlgraphics.apache.org
Timeline
- Published
- Last modified