FlawAtlas
Search the atlas
CVE-2021-41411 Critical

CVE-2021-41411

drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability.

Exploit probability 1.2%
Published June 16, 2022
Required by Not available
Last source change August 27, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

10 explicit affected versions

Maven org.drools:drools-core

182 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2021-41411

drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability.

View original source
Open Source Vulnerabilities GHSA-rc57-9r3x-98cq

drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability.

View original source

05 / REFERENCES

Further evidence