Search for packages
Package details: pkg:deb/ubuntu/libxalan2-java@2.7.1-8ubuntu0.1
purl pkg:deb/ubuntu/libxalan2-java@2.7.1-8ubuntu0.1
Next non-vulnerable version 2.7.1-9
Latest non-vulnerable version 2.7.1-9
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-1psf-36k5-aaaa
Aliases:
CVE-2014-0107
GHSA-rc2w-r4jq-7pfx
The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access external resources via a crafted (1) xalan:content-header, (2) xalan:entities, (3) xslt:content-header, or (4) xslt:entities property, or a Java property that is bound to the XSLT 1.0 system-property function.
2.7.1-9
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version