Vulnerabilidades do Eclipse Foundation Jaxb-ri (core)
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Eclipse Foundation Jaxb-ri (core): 1 registro(s), com versões afetadas e correções.
CVE-2026-92877
Alta · 8.3
CWE-611 12/10/2026
The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML...
The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local files via out-of-band XXE.