Описание
XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser.
Ссылки
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:inetsoftware:i-net_clear_reports:19.0.287:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00428
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-611
Связанные уязвимости
github
больше 3 лет назад
XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser.
EPSS
Процентиль: 62%
0.00428
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-611