CVE-2019-10782

State: Published
Severity: Not scored
Published: Jan 30, 2020
Updated: Aug 4, 2024
Reserved: Apr 3, 2019

Description

All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
com.puppycrawl.tools:checkstylen/a	all versions before 8.29Affected

References

https://snyk.io/vuln/SNYK-JAVA-COMPUPPYCRAWLTOOLS-543266
[debian-lts-announce] 20200210 [SECURITY] [DLA 2099-1] checkstyle security updatemailing-list
[nifi-commits] 20200421 svn commit: r1876802 - /nifi/site/trunk/registry-security.htmlmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.