Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-28168

Apache XML Graphics FOP: XML External Entity (XXE) Processing

Description

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache XML Graphics FOP

Default version status: unaffected

  • 2.9affected

References