GHSA-jqfv-jrvq-95jmMediumCVSS 5.3

Apache XML Graphics FOP XML External Entity Reference ('XXE') vulnerability

Published
October 9, 2024
Last Modified
July 10, 2025

🔗 CVE IDs covered (1)

CVE-2024-28168 →

📋 Description

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP.

This issue affects Apache XML Graphics FOP: 2.9.

Users are recommended to upgrade to version 2.10, which fixes the issue.

🎯 Affected products1

  • maven/org.apache.xmlgraphics:fop-core:<= 2.9

🔗 References (6)