Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-16999

XXE in Ministry of Justice's UYAP Document Editor

Description

Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking. This issue affects UYAP Document Editor: from 4.5.17 before 5.4.17.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ministry of Justice UYAP Document Editor

Default version status: unaffected

  • 4.5.17 to < 5.4.17affected

References