CVE-2024-51136

9.8 criticalEPSS 1.2%

Critical (9.8) in openimaj openimaj. EPSS 1.2% chance of exploitation in the next 30 days.

An XML External Entity (XXE) vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWEs: CWE-611, CWE-91
Published: 2024-11-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

openimaj:openimaj

References

https://github.com/openimaj/openimaj
https://github.com/openimaj/openimaj/issues/382
https://mvnrepository.com/artifact/org.openimaj.tools/WebTools

Check your stack JSON