Description
Apache Any23存在XML外部实体注入漏洞，此漏洞是缺乏校验导致的。
Apache Any23 CVE-2022-25312 XML外部实体注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2022-25312
https://github.com/advisories/GHSA-2rmm-87v7-34rj
https://www.cnvd.org.cn/flaw/show/CNVD-2022-21221
https://access.redhat.com/security/cve/cve-2022-25312
https://www.miggo.io/vulnerability-database/cve/CVE-2022-25312
https://zone.ci/aliyun/ali_nvd/65699.html
https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHEANY23-2419049
https://www.acunetix.com/vulnerabilities/sca/cve-2022-25312-vulnerability-in-maven-package-org-apache-any23-apache-any23/
https://cve.circl.lu/vuln/cve-2022-25312
https://lists.apache.org/thread/y6cm5n3ksohsrhzqknqhzy7p3mtkyk23
https://any23.apache.org/download.html
https://www.openwall.com/lists/oss-security/2022/03/04/2