{"id":"CVE-2018-13439","aliases":[],"url":"https://o3.security/vulnerability/CVE-2018-13439","summary":"WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.","details":"WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.","published":"2018-07-08T15:00:00.000Z","modified":"2024-08-05T09:00:35.152Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://packetstormsecurity.com/files/148390/WeChat-Pay-SDK-XXE-Injection.html"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2024-08-05T09:00:35.152Z"}}