Critical severityNVD Advisory· Published Dec 30, 2022· Updated Aug 5, 2024
iText RUPS XfaFile.java xml external entity reference
CVE-2017-20151
Description
A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xml external entity reference. The patch is identified as ac5590925874ef810018a6b60fec216eee54fb32. It is recommended to apply a patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
com.itextpdf:itext-rupsMaven | <= 7.0.1 | — |
Affected products
2- iText/RUPSv5Range: n/a
Patches
Vulnerability mechanics
References
5- github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32ghsapatchWEB
- github.com/advisories/GHSA-j69f-fgh5-f7mcghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-20151ghsaADVISORY
- vuldb.comghsasignaturepermissions-requiredWEB
- vuldb.comghsavdb-entrytechnical-descriptionWEB
News mentions
0No linked articles in our index yet.