Wxjava

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2018-20318	Wechat Group weixin-java-tools	Cri	0.64	9.8	0.02		Dec 21, 2018	An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file.
CVE-2019-5312	Wxjava Project Wxjava	Cri	0.57	9.8	0.02		Jan 4, 2019	An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318.

CVE-2018-20318CriDec 21, 2018
Wechat Group
weixin-java-tools
risk 0.64cvss 9.8epss 0.02
An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file.
CVE-2019-5312CriJan 4, 2019
Wxjava Project
Wxjava
risk 0.57cvss 9.8epss 0.02
An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318.