Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-77m5-rm2p-m2qh

Опубликовано: 11 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.

National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.

EPSS

Процентиль: 17%
0.00053
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVSS3: 5.5
nvd
почти 3 года назад

National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker.

EPSS

Процентиль: 17%
0.00053
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-611