CVE-2019-5427 in c3p0信息

摘要

由 VulDB • 2026-05-17

c3p0 版本低于 0.9.5.4 时，在加载 XML 配置时可能因缺少针对递归实体扩展的保护措施而遭受“十亿次笑声”（billion laughs）攻击。

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2019-01-04

管理

已接受

条目

VDB-133969

EPSS

0.04882

KEV

否

活动

非常低

来源

MITREhttps://www.cve.org/CVERecord?id=CVE-2019-5427
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2019-5427
CVE Detailshttps://www.cvedetails.com/cve/CVE-2019-5427/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!