VULNERABILITY INTELLIGENCE

CVE-2017-20151

CVSS score5.5 MEDIUM
EPSS probability0.79%
CISA KEVNot currently listed
Published2022-12-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xml external entity reference. The patch is identified as ac5590925874ef810018a6b60fec216eee54fb32. It is recommended to apply a patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability.

Weakness classification

  • CWE-611: Improper Restriction of XML External Entity Reference

Primary references