VYPR

Maven package

com.github.binarywang/weixin-java-common

pkg:maven/com.github.binarywang/weixin-java-common

Vulnerabilities (1)

  • CVE-2019-5312Jan 4, 2019
    affected < 3.3.2.Bfixed 3.3.2.B

    An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318.