CVE:CVE-2022-0839
CNNVD:CNNVD-202203-471
Github liquibase是用于跟踪、版本和部署数据库架构更改。
liquibase 存在安全漏洞，该漏洞源于 XML 外部实体引用限制不当。
solution:Upgrade liquibase liquibase to a higher version than 4.8.0,and avoid the version (,4.8.0); Upgrade oracle sqlcl to a higher version than 19c,and avoid the version 19c