XXE Vulnerability in org.hl7.fhir.core XSLT Parsing (CVE-2024-52007)

github.com 2024-11-11中国語 →English →

Security AdvisoryGHSA-6cr6-ph3p-f5rfHighhapifhir

Affected:

org.hl7.fhir.dstu2016may < 6.4.0
org.hl7.fhir.dstu3 < 6.4.0
org.hl7.fhir.r4 < 6.4.0
org.hl7.fhir.r4b < 6.4.0
org.hl7.fhir.r5 < 6.4.0

Fixed in:

6.4.0

参照 CVE: CVE-2024-52007 · 8.6

文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档

本文由本平台从 github.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。

このソースからの他の記事

LangGraph Memory Key Confusion Vulnerability in AI-fundamentals 2026-07-04 Session Isolation Vulnerability in Smart Customer Service Causing Unauthorized Access 2026-07-04 RT-Thread RT-Smart Serial Driver ioctl Unvalidated User Pointer Vulnerability 2026-07-04 RT-Smart serial_ioctl Unchecked User Pointer Vulnerability and Fix Analysis 2026-07-04 fickling MLAllowList Bypass via State Pollution 2026-07-04

离线存档

离线截图 & PDF 为 Pro 专属