Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-10683HistoryMay 01, 2020 - 7:15 p.m.
CVE-2020-10683
2020-05-0119:15:12
Debian Security Bug Tracker
security-tracker.debian.org
12
0.007 Low
EPSS
Percentile
79.7%
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | dom4j | < 2.1.3-1 | dom4j_2.1.3-1_all.deb |
| Debian | 11 | all | dom4j | < 2.1.3-1 | dom4j_2.1.3-1_all.deb |
| Debian | 10 | all | dom4j | <= 2.1.1-2 | dom4j_2.1.1-2_all.deb |
| Debian | 999 | all | dom4j | < 2.1.3-1 | dom4j_2.1.3-1_all.deb |
| Debian | 13 | all | dom4j | < 2.1.3-1 | dom4j_2.1.3-1_all.deb |
Related
osv
osv
CVE-2020-10683
2020-05-01 19:15:12
dom4j allows External Entities by default which might enable XXE attacks
2020-06-05 16:13:36
redhatcve
redhatcve
CVE-2020-10683
2022-05-14 11:33:01
prion
prion
Xxe
2020-05-01 19:15:00
ibm
ibm
mageia
mageia
Updated dom4j packages fix a security vulnerability
2021-01-17 19:07:01
ubuntu
ubuntu
dom4j vulnerability
2020-10-13 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4575-1)
2020-10-14 00:00:00
Huawei EulerOS: Security Advisory for dom4j (EulerOS-SA-2020-2102)
2020-09-29 00:00:00
openSUSE: Security Advisory for dom4j (openSUSE-SU-2020:0719-1)
2020-05-27 00:00:00
veracode
veracode
XML External Entity
2020-04-22 04:37:29
nessus
nessus
EulerOS 2.0 SP8 : dom4j (EulerOS-SA-2020-1799)
2020-07-30 00:00:00
EulerOS 2.0 SP5 : dom4j (EulerOS-SA-2020-1596)
2020-06-02 00:00:00
EulerOS 2.0 SP2 : dom4j (EulerOS-SA-2020-1677)
2020-06-17 00:00:00
f5
f5
K02349370 : dom4j library vulnerability CVE-2020-10683
2020-05-12 00:00:00
cvelist
cvelist
CVE-2020-10683
2020-05-01 18:55:25
github
github
dom4j allows External Entities by default which might enable XXE attacks
2020-06-05 16:13:36
cve
cve
CVE-2020-10683
2020-05-01 19:15:12
ubuntucve
ubuntucve
CVE-2020-10683
2020-05-01 00:00:00
redhat
redhat
hp
hp
HP Device Manager Security Updates
2023-10-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00