SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.
| Software | From | Fixed in |
|---|---|---|
org.simpleframework / simple-xml
|
- | 2.7.1 |
| apache / solr | 8.4.1 | 8.4.1.x |
| simplexml_project / simplexml | - | 2.7.1.x |