CVE-2019-13990

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

Date published : 2019-07-26

https://github.com/quartz-scheduler/quartz/issues/467

https://www.oracle.com//security-alerts/cpujul2021.html