high7.5
CVE-2021-3869
Improper Restriction of XML External Entity Reference in Stanford CoreNLP
Impact
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | edu.stanford.nlp:stanford-corenlp | <= 4.3.0 | 4.3.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stanford | Corenlp | through 4.3.0 |