Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages. If the XML parsing is handled incorrectly it could potentially expose sensitive data on the server, denial of service, or server side request forgery.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Midnight Coders WebORB for Java 安全漏洞
Vulnerability Description
Midnight Coders WebORB for Java是美国Midnight Coders公司的一款跨平台为桌面、浏览器和移动客户端以及相应的Java POJO等组件和Web服务的数据和媒体提供通用连接的集成服务器。 Midnight Coders WebORB for Java 5.1.1.0版本中存在XML外部实体注入漏洞。攻击者可利用该漏洞获取敏感信息，或造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A