CVE-2017-20151: Improper Restriction of XML External Entity Reference

December 30, 2022 (updated January 10, 2023)

A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xml external entity reference. The name of the patch is ac5590925874ef810018a6b60fec216eee54fb32. It is recommended to apply a patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability.

References

github.com/advisories/GHSA-j69f-fgh5-f7mc
github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32
nvd.nist.gov/vuln/detail/CVE-2017-20151
vuldb.com/?ctiid.217054
vuldb.com/?id.217054

Code Behaviors & Features

Detect and mitigate CVE-2017-20151 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →