Vulnerabilities > Apache > Formatting Objects Processor > 1.1

DATE CVE VULNERABILITY TITLE RISK
2017-04-18 CVE-2017-5661 XXE vulnerability in Apache Formatting Objects Processor
In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files.
network
apache CWE-611
7.9