XMLUnit vulnerabilities

🔔 Create alert RSS

Published CVEs affecting XMLUnit products: 1 record(s), with severity, exploitation and fixes.

XMLUnit for Java 1

Exploited only (KEV) →

CVE-2024-31573 Medium · 4.0 CWE-669 Oct 17, 2025

Incorrect Resource Transfer Between Spheres in XMLUnit XMLUnit for Java

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.