Apache Commons Jelly
1 CVEs affecting Apache Commons Jelly. Latest disclosed: 2017-09-28. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-12621 | Critical | 9.8 | 2017-09-28 | During Jelly (xml) file parsing with Apache Xerces, if a custom doctype entity is declared with a "SYSTEM" entity with a URL and that entity is used in the bod… |