exploitDog

GHSA-jvf2-rrq7-v6rf

Опубликовано: 14 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 7.5

Описание

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. This can also be used for SSRF.

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. This can also be used for SSRF.

Ссылки

EPSS

Процентиль: 58%

0.00371

Низкий

7.5 High

CVSS3

CVE ID

Дефекты

CWE-611

Связанные уязвимости

CVE-2018-18737

CVSS3: 7.5

nvd

больше 7 лет назад

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. This can also be used for SSRF.

EPSS

Процентиль: 58%

0.00371

Низкий

7.5 High

CVSS3

CVE ID

Дефекты

CWE-611