CVE-2017-20151

A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xml external entity reference. The patch is identified as ac5590925874ef810018a6b60fec216eee54fb32. It is recommended to apply a patch to fix this issue. VDB-217054 is the identifier assigned to this vulnerability.

• CWE-611

• https://github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32Patch
• https://vuldb.com/?ctiid.217054Third Party Advisory
• https://vuldb.com/?id.217054Third Party Advisory
• https://github.com/itext/rups/commit/ac5590925874ef810018a6b60fec216eee54fb32Patch
• https://vuldb.com/?ctiid.217054Third Party Advisory
• https://vuldb.com/?id.217054Third Party Advisory

Published

Dec 30, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-20146Usage of the CORS handler may apply improper CORS headers, a…9.8
• CVE-2017-20147In the ebuild package through smokeping-2.7.3-r1 for SmokePi…6.5
• CVE-2017-20148In the ebuild package through logcheck-1.3.23.ebuild for Log…9.8
• CVE-2017-20149The Mikrotik RouterOS web server allows memory corruption in…9.8
• CVE-2017-2015Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-20150A vulnerability was found in challenge website. It has been …8.8
• CVE-2017-20152A vulnerability, which was classified as problematic, was fo…7.5
• CVE-2017-20153A vulnerability has been found in aerouk imageserve and clas…6.1
• CVE-2017-20154A vulnerability was found in ghostlander Phoenixcoin. It has…7.5
• CVE-2017-20155A vulnerability was found in Sterc Google Analytics Dashboar…6.1
• CVE-2017-20156A vulnerability was found in Exciting Printer and classified…9.8
• CVE-2017-20157A vulnerability was found in Ariadne Component Library up to…9.8