Tracker / CVE-2017-15691
CVE-2017-15691
Medium 6.5
In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.
Affected products and versions
| apache | uima-as · … → 2.10.2 |
|---|---|
| apache | uimaducc · … → 2.2.2 |
| apache | uimafit · … → 2.4.0 |
| apache | uimaj |
| apache | uimaj · … → 2.10.2 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.