← Database

CVE-2024-58335

MEDIUM CVSS: 5.0 Published: 2025-12-24 Modified: 2026-06-17

Description

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java.

Affected Platforms

Unknown

Weakness Type

CWE-611

References