{"id":"CVE-2017-20151","aliases":[],"url":"https://o3.security/vulnerability/CVE-2017-20151","summary":"iText RUPS XML External Entity vulnerability","details":"A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file `src/main/java/com/itextpdf/rups/model/XfaFile.java`. The manipulation leads to xml external entity reference. The name of the patch is ac5590925874ef810018a6b60fec216eee54fb32. It is recommended to apply a patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability.","published":"2022-12-30T12:30:25Z","modified":"2023-11-08T03:59:17.325834Z","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"com.itextpdf:itext-rups","fixedVersion":null}],"fix":{"url":"https://github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32","label":"itext/rups@ac55909"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-20151"},{"type":"WEB","url":"https://github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32"},{"type":"PACKAGE","url":"https://github.com/itext/rups"},{"type":"WEB","url":"https://vuldb.com/?ctiid.217054"},{"type":"WEB","url":"https://vuldb.com/?id.217054"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T03:59:17.325834Z"}}