GHSA-mwx3-c2hq-28xwLowCVSS 2.2
TwsCachedXPathAPI in Convertigo through 8.3.4 does not restrict the use of commons-jxpath APIs.
🔗 CVE IDs covered (1)
📋 Description
TwsCachedXPathAPI in Convertigo through 8.3.4 does not restrict the use of commons-jxpath APIs.
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2025-43955
- https://github.com/convertigo/convertigo/issues/898
- https://github.com/convertigo/convertigo/commit/431d1bfeb360a55f4ed299cc3aa287cc5c6357e1
- https://github.com/convertigo/convertigo/blob/8.3.11/CHANGELOG.md#8311
- https://github.com/convertigo/convertigo/releases/tag/8.3.11
- https://github.com/advisories/GHSA-mwx3-c2hq-28xw