CVE-2024-55156
An XML External Entity (XXE) vulnerability in the deserializeArgs() method of Java SDK for CloudEvents v4.0.1 allows attackers to access sensitive information via supplying a cr…
Published: 2025-02-21 · CVSS: 5.5 · CVSS 3.1
An XML External Entity (XXE) vulnerability in the deserializeArgs() method of Java SDK for CloudEvents v4.0.1 allows attackers to access sensitive information via supplying a crafted XML-formatted event message.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7