CVE-2023-6194
This means that if a user chooses to use a malicious report definition XML file containing an external entity reference to generate a report then Eclipse Memory Analyzer may access external files or URLs defined via a DTD in the report definition.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.32%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition (DTD) references to external entities. This means that if a user chooses to use a malicious report definition XML file containing an external entity reference to generate a report then Eclipse Memory Analyzer may access external files or URLs defined via a DTD in the report definition.
- CVSS 3.1
- 7.1 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- EPSS
- 0.32% probability · 24th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-611
- Affected
- eclipse/memory analyzer
- Source
- emo@eclipse.org
References
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=582631Exploit, Issue Tracking, Patch, Vendor Advisory
- https://gitlab.eclipse.org/security/cve-assignement/-/issues/15Exploit, Issue Tracking, Vendor Advisory
- https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/169Exploit, Issue Tracking, Vendor Advisory
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=582631Exploit, Issue Tracking, Patch, Vendor Advisory
- https://gitlab.eclipse.org/security/cve-assignement/-/issues/15Exploit, Issue Tracking, Vendor Advisory
- https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/169Exploit, Issue Tracking, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.