TI-2026-07232 CVE-2026-8211 · GHSA-cmq8-32v4-qp9h
codelibs Fess JSP File AdminDesignAction.java update code injection
Priority MEDIUM 56
A vulnerability was detected in codelibs Fess up to 15.5.1.
3 records
A vulnerability was detected in codelibs Fess up to 15.5.1.
Fess is a deployable Enterprise Search Server.
codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.