You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.
CVE-2019-10782 - Medium Severity Vulnerability
Vulnerable Library - checkstyle-8.13.jar
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard
Library home page: http://checkstyle.sourceforge.net/
Path to dependency file: hadoop-crypto/hadoop-crypto/build.gradle
Path to vulnerable library: 20200729164840_WMHNNU/downloadResource_RHQTXV/20200729165122/checkstyle-8.13.jar
Dependency Hierarchy:
Found in HEAD commit: c87ffc6b57551c0ce1c2ffa481dbff77be9b0e38
Vulnerability Details
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.
Publish Date: 2020-01-30
URL: CVE-2019-10782
CVSS 3 Score Details (5.3)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10782
Release Date: 2020-01-30
Fix Resolution: com.puppycrawl.tools:checkstyle:8.29
⛑️ Automatic Remediation is available for this issue
The text was updated successfully, but these errors were encountered: