Search for packages
| purl | pkg:maven/xerces/xercesImpl@2.12.sp2 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ff7b-9g5f-aaar
Aliases: CVE-2020-14338 GHSA-w4jq-qh47-hvjq |
A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This issue is the same flaw as CVE-2020-14621, which affected OpenJDK, and uses a similar code. This flaw affects all Xerces JBoss versions before 2.12.0.SP3. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T20:04:17.256329+00:00 | GHSA Importer | Affected by | VCID-ff7b-9g5f-aaar | None | 36.0.0 |
| 2024-09-17T22:41:31.603056+00:00 | GitLab Importer | Affected by | VCID-ff7b-9g5f-aaar | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/xerces/xercesImpl/CVE-2020-14338.yml | 34.0.1 |
| 2024-01-03T18:03:48.863266+00:00 | GitLab Importer | Affected by | VCID-ff7b-9g5f-aaar | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/xerces/xercesImpl/CVE-2020-14338.yml | 34.0.0rc1 |