critical9.8
CVE-2024-51135
powertac-server XML External Entity vulnerability
Impact
An XML External Entity (XXE) vulnerability in the component DocumentBuilderFactory of powertac-server v1.9.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.powertac:server-interface | <= 1.9.0 | none recorded |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://www.powertac.org/
- https://github.com/powertac/powertac-server
- https://github.com/powertac/powertac-server/issues/1166
- https://mvnrepository.com/artifact/org.powertac/server-interface
- https://github.com/advisories/GHSA-pgrc-8wp5-5mvq
- https://nvd.nist.gov/vuln/detail/CVE-2024-51135