← All advisories

Medium severity5.5NVD Advisory· Published Dec 14, 2021· Updated Jun 17, 2026

CVE-2021-3836

CVE-2021-3836

Description

dbeaver is vulnerable to Improper Restriction of XML External Entity Reference

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Weaver/dbeaver2 versions
cpe:2.3:a:dbeaver:dbeaver:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dbeaver:dbeaver:*:*:*:*:*:*:*:*range: <21.2.3
- (no CPE)
Weaver/Dbeaver/dbeaverv5
Range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/dbeaver/dbeaver/commit/4debf8f25184b7283681ed3fb5e9e887d9d4fe22nvdPatchThird Party Advisory
huntr.dev/bounties/a98264fb-1930-4c7c-b774-af24c0175fd4nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.