Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m945-cp8g-j6x8

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgery (SSRF) attacks and read arbitrary files via crafted XML data in a request to AccessPoint.aspx.

XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgery (SSRF) attacks and read arbitrary files via crafted XML data in a request to AccessPoint.aspx.

EPSS

Процентиль: 88%
0.04195
Низкий

Связанные уязвимости

nvd
больше 10 лет назад

XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forgery (SSRF) attacks and read arbitrary files via crafted XML data in a request to AccessPoint.aspx.

EPSS

Процентиль: 88%
0.04195
Низкий