critical9.8
CVE-2021-3878
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
Impact
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stanford | Corenlp | before 4.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/stanfordnlp/corenlp/commit/e5bbe135a02a74b952396751ed3015e8b8252e99
- https://huntr.dev/bounties/a11c889b-ccff-4fea-9e29-963a23a63dd2
- https://github.com/stanfordnlp/corenlp/commit/e5bbe135a02a74b952396751ed3015e8b8252e99
- https://huntr.dev/bounties/a11c889b-ccff-4fea-9e29-963a23a63dd2