description: Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.
problem types: XML External Entity (XXE) attacks
affected:
{
product: Apache PDFBox
vendor: n/a
versions:
status: affected, version: Apache PDFBox 2.0.14
}