[JXPATH-200] CVE-2022-41852 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

• Type: Bug
• Status: Open
• Priority: Blocker
• Resolution: Unresolved
• Affects Version/s: 1.3
• Fix Version/s: 1.4
• Assignee: Unassigned
• Reporter: Nicolò Mendola
• Created: 10/Oct/22 06:22
• Updated: 11/Nov/22 10:15

Description

There is a CVE detected in jxpath 1.3. and prior. Could you take a look?

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

https://avd.aquasec.com/nvd/2022/cve-2022-41852/

Best Regards