漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
XXE vulnerability in XSLT parsing in `org.hl7.fhir.publisher`
Vulnerability Description
The HL7 FHIR IG publisher is a tool to take a set of inputs and create a standard FHIR IG. Prior to version 1.7.4, XSLT transforms performed by various components are vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag `( ]>` could produce XML containing data from the host system. This impacts use cases where org.hl7.fhir.publisher is being used to within a host where external clients can submit XML. A previous release provided an incomplete solution revealed by new testing. This issue has been patched as of version 1.7.4. No known workarounds are available.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Vulnerability Title
HL7 FHIR IG Publisher Artifacts 代码问题漏洞
Vulnerability Description
HL7 FHIR IG Publisher Artifacts是Health Level Seven International开源的一个用于获取一组输入的工具。 HL7 FHIR IG Publisher Artifacts 1.7.4之前版本存在代码问题漏洞。攻击者利用该漏洞可以执行XML外部实体注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A