CVE-2022-2838CWE-611

CVE-2022-2838

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.5%

probabilidade de exploração

0.5%top 56% das CVEs

exploração observada

nãonenhuma fonte reporta

In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allowing the injection of arbitrary definitions which is able to access local files and expose their contents via HTTP requests.

Produtos afetados

The Eclipse Foundation · Eclipse Sphinx

Referências

https://bugs.eclipse.org/580542