Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fr47-w293-v3qj

Опубликовано: 25 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

EPSS

Процентиль: 11%
0.00038
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVSS3: 5.5
nvd
больше 2 лет назад

Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

EPSS

Процентиль: 11%
0.00038
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-611