Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-256f-5whx-5j84

Опубликовано: 27 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 4.1

Описание

Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31.

Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31.

EPSS

Процентиль: 15%
0.00048
Низкий

5.1 Medium

CVSS4

4.1 Medium

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVSS3: 4.1
nvd
2 месяца назад

Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31.

EPSS

Процентиль: 15%
0.00048
Низкий

5.1 Medium

CVSS4

4.1 Medium

CVSS3

Дефекты

CWE-611