CVE-2019-7722

NONE EPSS 65.3%
Published Feb 11, 20197y ago · Modified Jun 17, 20262w ago
Find Similar
Published Feb 11, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it (either by direct modification or MITM attacks when using remote rulesets) to perform information disclosure, denial of service, or request forgery attacks. (PMD 6.x is unaffected because of a 2017-09-15 change.)

Threat Intelligence

EPSS Exploit Probability
65.3% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-611

Affected Products 1

VendorProductVersionRange
pmd_projectpmd* ≤5.8.1

References 1

  • github.com https://github.com/pmd/pmd/issues/1650
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.