Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-41411
9.8
CRITICALCVSS v3
Published
June 16, 2022
CVSS v2
7.5 HIGH
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability.
apache/incubator-kie-drools
GitHubDrools is a rule engine, DMN engine and complex event processing (CEP) engine for Java
GitHubDrools is a rule engine, DMN engine and complex event processing (CEP) engine for JavaNVD
kiegroup/droolsGitHubThis repository is a fork of apache/incubator-kie-drools. Please use upstream repository for development.
GitHubThis repository is a fork of apache/incubator-kie-drools. Please use upstream repository for development.< 7.6.0NVD