~ / search / GHSA-4p4w-6h54-g885

GHSA-4p4w-6h54-g885

Improper Input Validation in Apache Santuario XML Security

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-4517

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.santuario:xmlsec < 1.5.6 1.5.6

Details

As written in the advisory (Markdown source, shown as plain text).

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

References

External links from the advisory. They lead to third-party sites.