binarywang/WxJava

Releases67

Frequency2 months 4 days

Last Release6 days ago

Stars33K

微信开发 Java SDK ，支持包括微信支付，开放平台，小程序，企业微信，视频号，公众号等的后端开发

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2019-5312NVD↗	= 3.3.0, < 3.4.0	Jan 4, 2019Friday, 4 January 2019, 16:29	9.8 CRITICAL	7.5 HIGH
An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file. NOTE: this issue exists because of an incomplete fix for CVE-2018-20318.
CVE-2018-20318NVD↗	= 3.2.0	Dec 21, 2018Friday, 21 December 2018, 00:29	—	7.5 HIGH
An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file.