Oracle HTTP Server Exposure of Resource to Wrong Sphere Vulnerability - CVE-2022-25236 - Vulnerability Database

Oracle HTTP Server Exposure of Resource to Wrong Sphere Vulnerability - CVE-2022-25236

Critical

Reference: CVE-2022-25236

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-25236

Title: Oracle HTTP Server Exposure of Resource to Wrong Sphere Vulnerability

Overview:

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.