← All advisories

Critical severity9.8NVD Advisory· Published Dec 11, 2018· Updated Jun 17, 2026

CVE-2018-20059

CVE-2018-20059

Description

jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ro.pippo:pippo-coreMaven	< 1.12.0	1.12.0

Affected products

2

Pippo/Pippo
cpe:2.3:a:pippo:pippo:1.11.0:*:*:*:*:*:*:*
ghsa-coords
pkg:maven/ro.pippo/pippo-core
Range: < 1.12.0

Patches

Vulnerability mechanics

References

4

github.com/pippo-java/pippo/issues/486nvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-rmm5-g63h-m6g9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-20059ghsaADVISORY
github.com/pippo-java/pippo/commit/9f36e5891c0b11f840e1e1561ae96d83ba9ce759ghsaWEB

News mentions

0

No linked articles in our index yet.