-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from insecure XSLT processing where the TransformerFactory wasn't configured with FEATURE_SECURE_PROCESSING. This allowed execution of Java extension functions through XSLT stylesheets. The commit explicitly adds transformerFactory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true) to mitigate this. The PoC demonstrates exploiting this by calling Runtime.getRuntime() through Xalan extensions, which would be blocked when secure processing is enabled.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| net.sourceforge.htmlunit:htmlunit | maven | < 3.0.0 | 3.0.0 |
JavaJavaOngoing coverage of React2Shell