Vulnerabilities

TI-2021-20146 CVE-2021-44550 · GHSA-x2p8-rgfm-qw3v

An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in…

MEDIUM 45

An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01294 Published 2022-02-23 Fixed in 4.4.0 CWE-74

TI-2022-00175 CVE-2022-0239 · GHSA-75vw-3m5v-fprh

HIGH 82

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01217 Published 2022-01-17 Fixed in 4.3.3, 4.4.0 CWE-611

TI-2022-00136 CVE-2022-0198 · GHSA-mh83-jcw5-rjh8

LOW 33

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00763 Published 2022-01-13 Fixed in 4.3.3 CWE-611

TI-2021-02797 CVE-2021-3869 · GHSA-8gf7-w3cp-gfh3

LOW 36

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0136 Published 2021-10-19 Fixed in 4.3.1 CWE-611

TI-2021-02801 CVE-2021-3878 · GHSA-5h9g-8xcv-qjq9

MEDIUM 46

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01886 Published 2021-10-15 Fixed in 4.3.1 CWE-611