← All advisories

High severity7.5NVD Advisory· Published Jul 8, 2018· Updated Jun 17, 2026

CVE-2018-13439

CVE-2018-13439

Description

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.github.wxpay:wxpay-sdkMaven	<= 3	—

Affected products

1

ghsa-coords
pkg:maven/com.github.wxpay/wxpay-sdk
Range: <= 3

Patches

Vulnerability mechanics

References

3

packetstormsecurity.com/files/148390/WeChat-Pay-SDK-XXE-Injection.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-gqgv-2gp3-qqp3ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-13439ghsaADVISORY

News mentions

0

No linked articles in our index yet.