XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.drools:drools-core(Maven) | 0 | 6.2.0.Final | N/A |
| org.jbpm:jbpm-bpmn2(Maven) | 0 | 6.2.0.Final | N/A |
CVSS Metrics
