← back
CVE-2021-3836

Improper Restriction of XML External Entity Reference in dbeaver/dbeaver

CVSS 9.8 CRITICALEPSS 0.9%CWE-611
dbeaver is vulnerable to Improper Restriction of XML External Entity Reference
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
dbeaver · dbeaver/dbeaver

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/dbeaver/dbeaver/commit/4debf8f25184b7283681ed3fb5e9e887d9d4fe22https://huntr.dev/bounties/a98264fb-1930-4c7c-b774-af24c0175fd4