Threats tagged 'ghsa-5jff-rm7x-vvwf'

Eclipse AAS4J versions before 3.0.1 contain a vulnerability in the XmlSchemaValidator.validateSchema() method, which uses a default JAXP Validator that allows resolution of external DTDs and entities. This enables an attacker supplying a crafted AAS XML document or AASX package to read local files on the host and exfiltrate their contents, as well as perform server-side request forgery (SSRF) by making the validator send arbitrary outbound requests. The validation process does not report errors despite the malicious activity. The vulnerability is fixed in version 3.0.1 by disabling external DTD and schema access and rejecting DOCTYPE declarations.