Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspecified other impact via crafted XML data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Play 安全漏洞
Vulnerability Description
Play是一套开源的Java Web应用框架。该框架具有可扩展、资源消耗低等特点。 Play 2.2.6之前的版本和2.3.5之前的2.3.x版本中的Java XML功能存在XML外部实体注入漏洞。远程攻击者可借助特制的XML数据利用该漏洞读取任意文件或造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A