VULNERABILITY INTELLIGENCE
CVE-2024-31573
CVSS score4 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2025-10-17
Last modified2026-10-02
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension functions are enabled.
Weakness classification
- cve@mitre.org: CWE-669