High severity · published Dec 11, 2023
CVE-2023-6194
In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition (DTD) references to external entities
7.1
CVSS
0.3%
EPSS
No
On KEV
Description
In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit
document type definition (DTD) references to external entities.
This means that if a user chooses to use a malicious report definition XML file containing an external entity reference
to generate a report then Eclipse Memory Analyzer may access external files or URLs defined via a DTD in the report definition.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Eclipse Memory Analyzer (tools.mat) · Eclipse Foundation
0.7 through 1.14.0 · source: vendor
MA
Memory Analyzer · Eclipse
0.7 through 1.14.0 · source: NVD
Affected product
EM
Eclipse Memory Analyzer (tools.mat)
Eclipse Foundation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-6194
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-6194
Exploit
https://bugs.eclipse.org/bugs/show_bug.cgi?id=582631
Exploit
https://gitlab.eclipse.org/security/cve-assignement/-/issues/15
Exploit
https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/169