Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat Drools 安全漏洞
Vulnerability Description
Red Hat Drools是美国红帽（Red Hat）公司的一种业务规则管理系统，它具有基于正向和反向链接推理的规则引擎，更准确地说，是使用Rete算法的增强实现的生产规则系统。 Red Hat Drools和jBPM 6.2.0之前版本中存在安全漏洞。远程攻击者可借助特制的BPMN2文件利用该漏洞读取任意文件，或造成其他影响。
CVSS Information
N/A
Vulnerability Type
N/A