What is GHSA-v2xm-76pq-phcf?

GHSA-v2xm-76pq-phcf is a security advisory published by GitHub Security Advisories with Medium severity. ClassGraph XML External Entity Reference

Which CVE IDs does GHSA-v2xm-76pq-phcf cover?

GHSA-v2xm-76pq-phcf covers the following CVE IDs: CVE-2021-47621. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v2xm-76pq-phcf?

GHSA-v2xm-76pq-phcf has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-v2xm-76pq-phcf?

GHSA-v2xm-76pq-phcf affects 1 product, including: maven/io.github.classgraph:classgraph:\u003c 4.8.112.

GHSA-v2xm-76pq-phcfMediumCVSS 6.5

ClassGraph XML External Entity Reference

Vendor

GitHub Security Advisories

Published

June 21, 2024

Last Modified

August 9, 2024

🔗 CVE IDs covered (1)

CVE-2021-47621 →

📋 Description

ClassGraph before 4.8.112 was not resistant to XML eXternal Entity (XXE) attacks.

🎯 Affected products1

maven/io.github.classgraph:classgraph:< 4.8.112

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2021-47621
https://github.com/classgraph/classgraph/pull/539
https://github.com/classgraph/classgraph/commit/681362ad6b0b9d9abaffb2e07099ce54d7a41fa3
https://docs.r3.com/en/platform/corda/4.8/enterprise/release-notes-enterprise.html
https://github.com/classgraph/classgraph/releases/tag/classgraph-4.8.112
https://github.com/advisories/GHSA-v2xm-76pq-phcf