Executive brief
JavaMelody has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.
Affected products
- Maven net.bull.javamelody:javamelody-core
Junglewise Threat Intelligence
CVE-2018-15531: JavaMelody has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.
CVE-2018-15531 · Severity: low · CVSS 3 · Published 2018-10-17
Technologies: net.bull.javamelody:javamelody-core (Maven). Vendors: Maven.