Apache Cocoon 2.1.12 - XML Injection CVE-2020-11991
- Severity
- EPSS Score
- EPSS Percentile
- Vulnerability description
- Not available
- Risk description
- Not available
- Recommendation
- Not available
- References
- https://lists.apache.org/thread/6xg5j4knfczwdhggo3t95owqzol37k1bhttps://nvd.nist.gov/vuln/detail/CVE-2020-11991https://lists.apache.org/thread.html/r77add973ea521185e1a90aca00ba9dae7caa8d8b944d92421702bb54%40%3Cusers.cocoon.apache.org%3Ehttps://github.com/apache/cocoon/blob/BRANCH_2_1_X/src/webapp/samples/stream/sitemap.xmaphttps://github.com/apache/cocoon/blob/BRANCH_2_1_X/src/java/org/apache/cocoon/generation/StreamGenerator.javahttps://github.com/apache/cocoon/commit/8115f6ce315e306807b224f081fe06a27592c446
- Codename
- Not available
- Detectable with
- Network Scanner
- Scan engine
- Nuclei
- Cisa Kev
- No
- Exploitable with Sniper
- No
- CVE Published
- Sep 11, 2020
- Detection added at
- Software Type
- Not available
- Vendor
- apache
- Product
- cocoon
Detect this vulnerability now!
Check your clients' targets (or your own) for this vulnerability and thousands more! Get proof for validation with our ethical hacking toolkit.