veraPDF-validation vulnerabilities
2 known vulnerabilities in veraPDF-validation from veraPDF. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.7average CVSS score
Latest first
- 8.7 High severity
veraPDF-validation: Improper Restriction of XML External Entity Reference
veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair. From 1.17.35 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity (XXE) vulnerability in validation-model/src/main/java/org/verapdf/gf/mode
- 8.7 High severity
veraPDF-validation: Improper Restriction of XML External Entity Reference
veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity (XXE) vulnerability in validation-model/src/main/java/org/verapdf/gf/model/tools/Dictionary