{"data":{"id":"310b0ac1-e07d-4eb4-8014-b82bad20ce03","title":"CVE-2018-20059: jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.","summary":"CVE-2018-20059 concerns jaxb/JaxbEngine.java in Pippo 1.11.0, which allows XXE (CWE-611, Improper Restriction of XML External Entity Reference). The NVD published the entry on 12/11/2018 and last modified it on 11/20/2024, with the CVE attributed to MITRE. NIST has not yet provided an NVD assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2018-20059","publishedAt":"2018-12-11T15:29:00.200Z","cveId":"CVE-2018-20059","cweIds":["CWE-611"],"cvssScore":"7.5","cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["ro.pippo:pippo-core@< 1.12.0 (fixed: 1.12.0)"],"affectedPackageNames":["ro-pippo:pippo-core"],"affectedPackageRefs":["maven:ro-pippo:pippo-core"],"affectedVendors":[],"affectedVendorsRaw":["Pippo"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.015,"epssCheckedAt":"2026-11-04T06:10:13.536Z","kevDateAdded":null,"advisoryAliases":["GHSA-rmm5-g63h-m6g9"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T04:01:15.457Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":"2026-10-29T21:53:05.124Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.5,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":null,"name":"ro.pippo:pippo-core","fixedVersion":"1.12.0","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":null,"source":null,"status":"ecosystem_unknown","checkedAt":"2026-10-29T21:53:04.973Z"}]}}