CVE Intelligence

Vulnerabilidades do Eclipse Foundation Jaxb-ri (core)

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Eclipse Foundation Jaxb-ri (core): 1 registro(s), com versões afetadas e correções.

CVE-2026-92877 Alta · 8.3 CWE-611 12/10/2026
The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML...
The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who can get untrusted XML unmarshalled through JAXB can read local files via out-of-band XXE.