NetSight
critical9.8

CVE-2018-20059

jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.

Impact

jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.

Affected products

VendorProductAffected versions
PippoPippo
Version 1.11.0

Weakness classification

References