An attacker can transmit malicious XML data to Apache Fop, dated 26/11/2024, in order to read a file, scan sites, or trigger a denial of service.

Plus d'information sur : https://vigilance.fr/vulnerability/Apache-Fop-external-XML-entity-injection-dated-26-11-2024-45738