CVE-2022-0219 Information

Description

Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Reference

https://huntr.dev/bounties/0d093863-29e8-4dd7-a885-64f76d50bf5e https://github.com/skylot/jadx/commit/d22db30166e7cb369d72be41382bb63ac8b81c52

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

NONE

Base Severity

5.5