jcthiele

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

jcthiele records in CISA KEV

No jcthiele vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-38422 CVE-2024-58335 · GHSA-m7xh-548p-355r

XML external entity injection in jcthiele OpenXRechnungToolbox

LOW 22

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.002 Published 2025-12-24 Fixed CWE-611

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0