High severity · published Dec 11, 2023
CVE-2023-6194
In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition (DTD) references to external entities
7.1
CVSS
0.3%
EPSS
No
On KEV
Description
In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit
document type definition (DTD) references to external entities.
This means that if a user chooses to use a malicious report definition XML file containing an external entity reference
to generate a report then Eclipse Memory Analyzer may access external files or URLs defined via a DTD in the report definition.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Memory Analyzer · Eclipse
0.7 through 1.14.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-6194
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-6194
Exploit
https://bugs.eclipse.org/bugs/show_bug.cgi?id=582631
Exploit
https://gitlab.eclipse.org/security/cve-assignement/-/issues/15
Exploit
https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/169
More from Memory Analyzer
9.0
CVE-2019-17634
Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report from a malicious heap dump
7.8
CVE-2019-17635
Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is replaced by a malicious version and the…