[org.liquibase:liquibase-core] Improper Restriction of XML External Entity Reference in Liquibase

The XMLChangeLogSAXParser() function in Liquibase prior to version 4.8.0 contains an issue that may lead to to Improper Restriction of XML External Entity Reference.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-0839
• https://github.com/liquibase/liquibase/commit/33d9d925082097fb1a3d2fc8e44423d964cd9381
• https://huntr.dev/bounties/f1ae5779-b406-4594-a8a3-d089c68d6e70
• https://github.com/advisories/GHSA-jvfv-hrrc-6q72