exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.exist-db:exist-core(Maven) | 0 | 5.1.0 | N/A |
CVSS Metrics
