kiegroup/jbpm

Releases201

Frequency3 weeks 2 days

Last Releaseabout 3 years ago

Stars1.74K

a Business Process Management (BPM) Suite

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2014-8125NVD↗	<= 6.1.0	Apr 21, 2015Tuesday, 21 April 2015, 17:59	—	7.5 HIGH
XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted BPMN2 file.