Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4462-fg6w-364q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.

An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.

EPSS

Процентиль: 83%
0.01914
Низкий

Связанные уязвимости

CVSS3: 9.8
nvd
почти 6 лет назад

An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.

EPSS

Процентиль: 83%
0.01914
Низкий