XML External Entity Reference

GHSA-7qfm-6m33-rgg9

Published Aug 13, 2021 · Modified Dec 2, 2024

Description

An issue was discovered in service-api before 4.3.12 and 5.x before 5.1.1 for Report Portal. It allows XXE, with resultant secrets disclosure and SSRF, via JUnit XML launch import.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-12642
WEB https://github.com/reportportal/reportportal/blob/master/SECURITY_ADVISORIES.md

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes