CVE-2019-10782: XEE
First published: Thu Jan 30 2020(Updated: )
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.
Credit: report@snyk.io
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Checkstyle | <8.29 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540@%3Ccommits.nifi.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2020/02/msg00008.html
- https://snyk.io/vuln/SNYK-JAVA-COMPUPPYCRAWLTOOLS-543266
- https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540%40%3Ccommits.nifi.apache.org%3E
Frequently Asked Questions
What is the severity of CVE-2019-10782?
CVE-2019-10782 is classified as a critical vulnerability due to its potential for XML External Entity (XXE) Injection attacks.
How do I fix CVE-2019-10782?
To fix CVE-2019-10782, you should upgrade to versions of Checkstyle after 8.29, where this vulnerability is resolved.
What versions of Checkstyle are affected by CVE-2019-10782?
All versions of Checkstyle before 8.29 are affected by CVE-2019-10782.
What type of vulnerabilities does CVE-2019-10782 involve?
CVE-2019-10782 involves XML External Entity (XXE) Injection vulnerabilities.
Is CVE-2019-10782 related to any previous vulnerabilities?
Yes, CVE-2019-10782 is related to an incomplete fix for CVE-2019-9658.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/checkstyle
- canonical/checkstyle