Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8vf-v36p-7qjw

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its output and expose restricted information.

An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its output and expose restricted information.

EPSS

Процентиль: 53%
0.00307
Низкий

7.5 High

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVSS3: 7.5
nvd
около 7 лет назад

An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its output and expose restricted information.

CVSS3: 7.5
fstec
около 7 лет назад

Уязвимость платформы мониторинга IIoT Monitor, связанная с некорректным контролем внешних XML-ссылок, позволяющая нарушителю внедрять некорректные документы в выходные данные

EPSS

Процентиль: 53%
0.00307
Низкий

7.5 High

CVSS3

Дефекты

CWE-611