CVE-2018-20433

CVE-2018-20433

Published · Updated

Follow this CVE+ Monitor c3p0+ Monitor com.mchange:c3p0

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.6%
c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization.
Affected products
n/a · n/a