kiegroup/drools

Releases278

Frequency2 weeks 4 days

Last Releaseabout 1 year ago

Stars166

This repository is a fork of apache/incubator-kie-drools. Please use upstream repository for development.

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2021-41411NVD↗	< 7.6.0	Jun 16, 2022Thursday, 16 June 2022, 10:15	9.8 CRITICAL	7.5 HIGH
drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability.