CVE-2019-13990
libquartz: XXE attacks via job description
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
CVSS 3.1 · 9.8 Critical
EPSS 16.6%
KEV · Not listed
Vendors
Products