GHSA-c9jj-3wvg-q65hCriticalCVSS 9.8

Vulnerability that affects org.apache.pdfbox:pdfbox

Published
July 5, 2019
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-0228 →

📋 Description

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.

🎯 Affected products1

  • maven/org.apache.pdfbox:pdfbox:>= 2.0.14, < 2.0.15

🔗 References (14)