CVE-2017-1000496

2022-10-0316:23:10

mitre

www.cve.org

commsy version 9.0.0

xxe attacks

configuration import

denial of service

remote code execution

8.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.5%

JSON

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code.

References

github.com/commsy/commsy/issues/2