Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.codelibs.fess:fess

2 known vulnerabilities (1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 low
Registry
Maven Central

Advisories 2

  • Fess has Insecure Temporary File Permissions

    Affected: fixed in 14.19.2.

  • codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser that can result in…

    Affected: fixed in 12.3.2.