CVE Intelligence

Jcthiele OpenXRechnungToolbox vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jcthiele OpenXRechnungToolbox: 1 record(s), with affected versions and fixes.

CVE-2024-58335 Medium · 5.0 CWE-611 Dec 24, 2025
XML External Entity (XXE) in Jcthiele OpenXRechnungToolbox
OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java.