CyberRota Analysis
AI-GeneratedThe vulnerability arises from the XSLT Transformer Step, which improperly initializes a TransformerFactory without adequate security configurations, making it susceptible to XML External Entity (XXE) injection attacks. This flaw can lead to data exfiltration and potential denial-of-service conditions. Organizations utilizing affected XSLT processing components should prioritize remediation to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks.