Junglewise Threat Intelligence

CVE-2019-7722: Improper Restriction of XML External Entity Reference in PMD

CVE-2019-7722 · Severity: low · CVSS 3 · Published 2022-05-14

Technologies: net.sourceforge.pmd:pmd-core (Maven). Vendors: Maven.

Executive brief

Improper Restriction of XML External Entity Reference in PMD

Affected products

Maven net.sourceforge.pmd:pmd-core

Related threats

PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages
PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext