Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET), exploitable by sending a crafted standard-conforming OSCI message from within the infrastructure.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OSCI Transport Library OSCI-Transport 安全漏洞
Vulnerability Description
OSCI Transport Library（Java）是德国电子政务的一个强制性传输协议的Java库，OSCI Transport Library（.NET）是它的.NET版本。OSCI-Transport是其中的一个基于XML的传输协议。 OSCI Transport Library 1.6.1 (Java)版本和OSCI Transport Library 1.6 (.NET)版本中的OSCI-Transport 1.2版本存在XML外部实体注入漏洞。攻击者可通过从内部结构发送特制的符合标准的OSC
CVSS Information
N/A
Vulnerability Type
N/A