Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2021-3878
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
Exploit prediction scoring system (EPSS) score
EPSS Score
0.003
EPSS Ranking
54.8%
CVSS Severity
CVSS v3 Score
9.8
CVSS v2 Score
7.5
References
https://github.com/stanfordnlp/corenlp/commit/e5bbe135a02a74b952396751ed3015e8b8252e99
https://huntr.dev/bounties/a11c889b-ccff-4fea-9e29-963a23a63dd2
https://github.com/stanfordnlp/corenlp/commit/e5bbe135a02a74b952396751ed3015e8b8252e99
https://huntr.dev/bounties/a11c889b-ccff-4fea-9e29-963a23a63dd2
Products affected by CVE-2021-3878
Stanford
»
Corenlp
»
Version:
1.3.5
cpe:2.3:a:stanford:corenlp:1.3.5
Stanford
»
Corenlp
»
Version:
1.3.6
cpe:2.3:a:stanford:corenlp:1.3.6
Stanford
»
Corenlp
»
Version:
3.3.0
cpe:2.3:a:stanford:corenlp:3.3.0
Stanford
»
Corenlp
»
Version:
3.3.1
cpe:2.3:a:stanford:corenlp:3.3.1
Stanford
»
Corenlp
»
Version:
3.4.0
cpe:2.3:a:stanford:corenlp:3.4.0
Stanford
»
Corenlp
»
Version:
3.4.1
cpe:2.3:a:stanford:corenlp:3.4.1
Stanford
»
Corenlp
»
Version:
3.5.0
cpe:2.3:a:stanford:corenlp:3.5.0
Stanford
»
Corenlp
»
Version:
3.5.1
cpe:2.3:a:stanford:corenlp:3.5.1
Stanford
»
Corenlp
»
Version:
3.5.2
cpe:2.3:a:stanford:corenlp:3.5.2
Stanford
»
Corenlp
»
Version:
3.6.0
cpe:2.3:a:stanford:corenlp:3.6.0
Stanford
»
Corenlp
»
Version:
3.7.0
cpe:2.3:a:stanford:corenlp:3.7.0
Stanford
»
Corenlp
»
Version:
3.8.0
cpe:2.3:a:stanford:corenlp:3.8.0
Stanford
»
Corenlp
»
Version:
3.9.1
cpe:2.3:a:stanford:corenlp:3.9.1
Stanford
»
Corenlp
»
Version:
3.9.2
cpe:2.3:a:stanford:corenlp:3.9.2
Stanford
»
Corenlp
»
Version:
3.9.2b
cpe:2.3:a:stanford:corenlp:3.9.2b
Stanford
»
Corenlp
»
Version:
4.0.0
cpe:2.3:a:stanford:corenlp:4.0.0
Stanford
»
Corenlp
»
Version:
4.1.0
cpe:2.3:a:stanford:corenlp:4.1.0
Stanford
»
Corenlp
»
Version:
4.2.0
cpe:2.3:a:stanford:corenlp:4.2.0
Stanford
»
Corenlp
»
Version:
4.2.1
cpe:2.3:a:stanford:corenlp:4.2.1
Stanford
»
Corenlp
»
Version:
4.2.2
cpe:2.3:a:stanford:corenlp:4.2.2
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved