CveMateVulnerability intelligence

The Eclipse Foundation Eclipse Lyo vulnerabilities

1 vulnerability

Known vulnerabilities in The Eclipse Foundation Eclipse Lyo, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2021-41042eclipselyo+24y ago07-07-2022 20:55

In Eclipse Lyo versions 1.0.0 to 4.1.0, a TransformerFactory is initialized with the defaults that do not restrict DTD loading when working with RDF/XML. This allows an attacker to cause an external DTD to be retrieved.