CVE-2021-33813

Related Vulnerabilities: CVE-2021-33813  

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.

Description

The MITRE CVE dictionary describes this issue as:

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.

Additional Information

  • Bugzilla 1973413: CVE-2021-33813 jdom: XXE allows attackers to cause a DoS via a crafted HTTP request
  • CWE-611: Improper Restriction of XML External Entity Reference
  • FAQ: Frequently asked questions about CVE-2021-33813