Description (CNA)
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| stanfordnlp / stanfordnlp/corenlp | affected unspecified through 4.3.0 |
CWE
CWE-611
References
- https://huntr.dev/bounties/2f8baf6c-14b3-420d-8ede-9805797cd324
- https://github.com/stanfordnlp/corenlp/commit/5d83f1e8482ca304db8be726cad89554c88f136a
ADP enrichment
No English description supplied.