CVE-2016-4216

Description

XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

References

https://github.com/advisories/GHSA-qv32-7r6p-xhhh

https://helpx.adobe.com/security/products/xmpcore/apsb16-24.html

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0668

http://www.securityfocus.com/bid/91717

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS