Security Advisory

CVE-2017-12620

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-10-02 14:00:00

Last updated 2024-09-16 19:15:51

Assigner apache

CVSS score not scored

State PUBLISHED

Description

When loading models or dictionaries that contain XML it is possible to perform an XXE attack, since Apache OpenNLP is a library, this only affects applications that load models or dictionaries from untrusted sources. The versions 1.5.0 to 1.5.3, 1.6.0, 1.7.0 to 1.7.2, 1.8.0 to 1.8.1 of Apache OpenNLP are affected.

← Browse all CVEs View on cve.org ↗