mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-29 01:31:01 +00:00
20 lines
689 B
Markdown
20 lines
689 B
Markdown
|
### [CVE-2018-20433](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20433)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
No PoCs from references.
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/ARPSyndicate/cvemon
|
||
|
|
- https://github.com/OWASP/www-project-ide-vulscanner
|
||
|
|
- https://github.com/shanika04/cp30_XXE_partial_fix
|
||
|
|
|