AttackFeed by Joe Wagner | Bioformats v8.3.0 Improper Restriction of XML External Entity Reference in Bio-Formats Leica Microsystems XML Parser  - Full Disclosure

Bioformats v8.3.0 Improper Restriction of XML External Entity Reference in Bio-Formats Leica Microsystems XML Parser  – Full Disclosure

Posted on By Joe-W No Comments on Bioformats v8.3.0 Improper Restriction of XML External Entity Reference in Bio-Formats Leica Microsystems XML Parser  – Full Disclosure
Alert Feeds

 

Posted by Ron E on Jan 05

Bio-Formats contains an XML External Entity (XXE) vulnerability in the
Leica Microsystems metadata parsing component. The vulnerability is caused
by the use of an insecurely configured DocumentBuilderFactory when
processing Leica XML-based metadata files (e.g., XLEF). When a crafted XML
file is supplied, the parser allows external entity resolution and external
DTD loading, enabling attackers to trigger arbitrary outbound network
requests, access…
 – Read More  – Full Disclosure 

You may also like

Alert Feeds
APPLE-SA-09-29-2025-2 iOS 18.7.1 and iPadOS 18.7.1  – Full Disclosure
September 30, 2025
Alert Feeds
Current Password not Required When Changing Password – flatpressv1.4.1  – Full Disclosure
September 23, 2025
Alert Feeds
APPLE-SA-12-12-2025-3 macOS Tahoe 26.2  – Full Disclosure
December 16, 2025
Alert Feeds
SEC Consult SA-20250925-0 :: Multiple Vulnerabilities in iMonitorSoft EAM employee monitoring #CVE-2025-10540 #CVE-2025-10541 #CVE-2025-10542  – Full Disclosure
September 25, 2025

Leave a Reply

AttackFeed by Joe Wagner
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.