Описание
GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An authenticated and remote attacker can send crafted HTTP requests to read arbitrary system files.
Уязвимые конфигурации
Конфигурация 1Версия до 21.8 (исключая)
cpe:2.3:a:gfi:mailessentials:*:*:*:*:*:*:*:*
EPSS
Процентиль: 21%
0.00067
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-611
CWE-611
Связанные уязвимости
CVSS3: 6.5
github
10 месяцев назад
GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An authenticated and remote attacker can send crafted HTTP requests to read arbitrary system files.
EPSS
Процентиль: 21%
0.00067
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-611
CWE-611