critical9.8
CVE-2017-20151
iText RUPS XML External Entity vulnerability
Impact
A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file `src/main/java/com/itextpdf/rups/model/XfaFile.java`. The manipulation leads to xml external entity reference. The name of the patch is ac5590925874ef810018a6b60fec216eee54fb32. It is recommended to apply a patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.itextpdf:itext-rups | <= 7.0.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Itextpdf | Rups | before 2017-08-01 |