Описание
A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.7.3 which can lead to an information disclosure or denial of service (DOS).
Ссылки
- ExploitThird Party Advisory
- PatchThird Party Advisory
- ExploitThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:modx:modx_revolution:2.7.3:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.00961
Низкий
9.1 Critical
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-611
Связанные уязвимости
EPSS
Процентиль: 76%
0.00961
Низкий
9.1 Critical
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-611