CVE-2021-33813: Improper Restriction of XML External Entity Reference

July 27, 2021 (updated November 1, 2021)

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.

References

github.com/advisories/GHSA-2363-cqg2-863c
github.com/hunterhacker/jdom/commit/dd4f3c2fc7893edd914954c73eb577f925a7d361
github.com/hunterhacker/jdom/pull/188
nvd.nist.gov/vuln/detail/CVE-2021-33813

Detect and mitigate CVE-2021-33813 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →