← Database

CVE-2021-41411

CRITICAL CVSS: 9.8 Published: 2022-06-16 Modified: 2026-06-17

Description

drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability.

Affected Platforms

Redhat Drools

Weakness Type

CWE-611

References