CVE-2024-28168 – Apache XML Graphics FOP: XML External Entity (XXE) Processing

https://notcve.org/view.php?id=CVE-2024-28168

09 Oct 2024 — Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue. This update for javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop fixes the following issues. • https://xmlgraphics.apache.org/security.html • CWE-611: Improper Restriction of XML External Entity Reference •