Apache Any23 vulnerabilities

1 known vulnerability in Apache Any23 from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Apache Any23: Improper Restriction of XML External Entity Reference

  CVE-2022-25312Mar 5, 2022ApacheEPSS 2.86%

  An XML external entity (XXE) injection vulnerability was discovered in the Any23 RDFa XSLTStylesheet extractor and is known to affect Any23 versions < 2.7. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacke