Описание
An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file.
Ссылки
- Third Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:rws:worldserver:11.8.2:*:*:*:*:*:*:*
EPSS
Процентиль: 92%
0.07936
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-611
Связанные уязвимости
CVSS3: 6.5
github
около 1 года назад
An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file.
EPSS
Процентиль: 92%
0.07936
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-611