Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Eclipse Subscribe
Filtered by product Lyo
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-41042 1 Eclipse 1 Lyo 2022-07-15 5.0 MEDIUM 5.3 MEDIUM
In Eclipse Lyo versions 1.0.0 to 4.1.0, a TransformerFactory is initialized with the defaults that do not restrict DTD loading when working with RDF/XML. This allows an attacker to cause an external DTD to be retrieved.