{"id":"GHSA-j69f-fgh5-f7mc","summary":"iText RUPS XML External Entity vulnerability","details":"A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file `src/main/java/com/itextpdf/rups/model/XfaFile.java`. The manipulation leads to xml external entity reference. The name of the patch is ac5590925874ef810018a6b60fec216eee54fb32. It is recommended to apply a patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability.","aliases":["CVE-2017-20151"],"modified":"2023-11-08T03:59:17.325834Z","published":"2022-12-30T12:30:25Z","database_specific":{"nvd_published_at":"2022-12-30T12:15:00Z","cwe_ids":["CWE-611"],"severity":"CRITICAL","github_reviewed":true,"github_reviewed_at":"2023-01-10T00:40:37Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-20151"},{"type":"WEB","url":"https://github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32"},{"type":"PACKAGE","url":"https://github.com/itext/rups"},{"type":"WEB","url":"https://vuldb.com/?ctiid.217054"},{"type":"WEB","url":"https://vuldb.com/?id.217054"}],"affected":[{"package":{"name":"com.itextpdf:itext-rups","ecosystem":"Maven","purl":"pkg:maven/com.itextpdf/itext-rups"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"7.0.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/12/GHSA-j69f-fgh5-f7mc/GHSA-j69f-fgh5-f7mc.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}