Jcthiele vulnerabilities
Published CVEs affecting Jcthiele products: 1 record(s), with severity, exploitation and fixes.
CVE-2024-58335
Medium · 5.0
CWE-611 Dec 24, 2025
XML External Entity (XXE) in Jcthiele OpenXRechnungToolbox
OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java.