GHSA-h755-h99p-9ffv
XML External Entity Reference in weixin-java-tools
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.github.binarywang:weixin-java-common | < 3.3.2.B | 3.3.2.B |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered in weixin-java-tools. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318.
References
External links from the advisory. They lead to third-party sites.