CVE-2024-28982
Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly protect the ACL service endpoint of the Pentaho User Console against XML External Entity Reference.
Reserved 2024-03-13 | Published 2024-06-26 | Updated 2024-09-11 | Assigner HITVANCWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Yesenia Trejo - Strike Security
support.pentaho.com/...cluding-8-3-x-Impacted-CVE-2024-28982
Support options
