Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m359-59cc-2426

Опубликовано: 14 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 6.5

Описание

A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker controlled server. This attack requires network access to the firewall management interface.

A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker controlled server. This attack requires network access to the firewall management interface.

EPSS

Процентиль: 36%
0.00149
Низкий

5.1 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVSS3: 6.5
nvd
около 1 года назад

A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker controlled server. This attack requires network access to the firewall management interface.

EPSS

Процентиль: 36%
0.00149
Низкий

5.1 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-611