Skip to content
Not rated

CVE-2024-28168 Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP

Description

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue.

Affected products and versions

Product Affected versions Fixed in
Apache XML Graphics FOP 2.9 No fix stated
xml_graphics_fop 2.9 No fix stated

References

Timeline

  1. Published
  2. Last modified
Track this CVE