Threats tagged 'ghsa-j9rh-p96m-mhhp'

jOpenDocument version 1.5 and earlier contains an improper restriction of XML external entity references, leading to a vulnerability classified as CWE-611. This flaw allows for Data Serialization External Entities Blowup, which can be exploited to cause resource exhaustion or other impacts related to XML external entity processing. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.3. No public exploits or known active exploitation have been reported. No official patch or remediation information is provided in the available data.