CveMateVulnerability intelligence

The Eclipse Foundation Eclipse Sphinx vulnerabilities

1 vulnerability

Known vulnerabilities in The Eclipse Foundation Eclipse Sphinx, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2022-2838eclipsesphinx+14y ago16-08-2022 10:10

In Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling processing of referenced external entities allowing the injection of arbitrary definitions which is able to access local files and expose their contents via HTTP requests.