Threats tagged 'ghsa-qr3h-4xv7-vc63'

An XML External Entity (XXE) vulnerability exists in Apache Axis2/Java versions through 2.0.1. When a client builds an AxisService from a WSDL URL, imported documents are parsed by wsdl4j's XML parser, which processes external entities. This allows an attacker controlling a WSDL or its imports to read local files or cause the JVM to make network requests. The issue is fixed in version 2.0.2.