CVE-2024-58335: Jcthiele Openxrechnungtoolbox

Medium severity, CVSS 5.0. EPSS: 0.2% chance of exploitation in the next 30 days.

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java.

Affected products

• Jcthiele Openxrechnungtoolbox

Published 2025-12-24. Last modified 2026-06-17.