CVE-2021-3836: Improper Restriction of XML External Entity Reference in dbeaver/dbeaver
Published Dec 14, 2021
·Updated
dbeaver is vulnerable to Improper Restriction of XML External Entity Reference
Affected Software
1 affected component
dbeaver dbeaver<21.2.3
Remediation
Event History
Dec 14, 2021
CVE Published
via MITRE·03:20 PM
Data Sourced
via MITRE·03:20 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-3836?
CVE-2021-3836 is a vulnerability in dbeaver that allows for an improper restriction of XML external entity reference.
2
How severe is CVE-2021-3836?
CVE-2021-3836 has a severity rating of 5.5 (critical).
3
Which software is affected by CVE-2021-3836?
Dbeaver, version 21.2.3 and below, is affected by CVE-2021-3836.
4
How can I fix CVE-2021-3836?
To fix CVE-2021-3836, update dbeaver to a version above 21.2.3.
5
Where can I find more information about CVE-2021-3836?
You can find more information about CVE-2021-3836 on the following references: [Link 1](https://github.com/dbeaver/dbeaver/commit/4debf8f25184b7283681ed3fb5e9e887d9d4fe22), [Link 2](https://huntr.dev/bounties/a98264fb-1930-4c7c-b774-af24c0175fd4)