{"cvss":0.0,"datePublished":"2023-11-25T00:00:00Z","dateUpdated":"2023-11-25T00:00:00Z","description":"When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system.","dueDate":"","id":"CVE-2020-11991","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"cocoon","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Apache cocoon Improper Restriction of XML External Entity Reference","vendor":"Apache"}