Paper/Archive/CVE-2021-3836

CVE-2021-3836

dbeaver dbeaver/dbeaver — Improper Restriction of XML External Entity Reference in dbeaver/dbeaver

EPSS 0.9%CVSS 9.8

critical.is priorityof 100

42

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 60.4.604 × 2012.1 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

dbeaver is vulnerable to Improper Restriction of XML External Entity Reference

Affected

ProductAffectedFixed inSource

dbeaver/dbeaverunspecified – < 21.2.321.2.3CNA

Scores by source

@huntrdev (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refhuntr.dev/bounties/a98264fb-1930-4c7c-b774-af24c0175fd4 refgithub.com/dbeaver/dbeaver/commit/4debf8f25184b7283681ed3fb5e9e887d9d4fe22