תיאור (מקור, אנגלית)
All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.
מוצרים מושפעים
apache: santuario xml security for java; apache: cxf; apache: tomee; debian: debian linux; oracle: agile product lifecycle management; oracle: commerce guided search; oracle: commerce platform; oracle: communications diameter intelligence hub; oracle: communications messaging server; oracle: flexcube private banking; oracle: outside in technology; oracle: peoplesoft enterprise peopletools; oracle: retail bulk data integration; oracle: retail financial integration; oracle: retail integration bus
קישורים10
- lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecf… Issue TrackingMailing ListPatchThird Party Advisory
- www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory
- www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory
- lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecf… Issue TrackingMailing ListPatchThird Party Advisory
- www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory
- www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory
- lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026…
- lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8…
- lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951…
- lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc285…
מדדים
- CVSS 3.1
-
7.5
HIGH
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS — סבירות ניצול
- 7% אחוזון 94 · נכון ל-4 בנובמבר 2026
- CWE
- CWE-200
האם אפשר לנצל את הפגיעות הזו אצלכם?
עדכון אבטחה סוגר את הפרצה הידועה. בדיקת חדירות מראה לאן תוקף עדיין יכול להגיע — עם הוכחה.