CVE-2019-20153

2020-01-0522:12:32

mitre

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.1%

JSON

An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in v5.4. An XML external entity (XXE) vulnerability in the upload definition feature in definition_upload_attach.jsp allows authenticated remote attackers to read arbitrary files (including configuration files containing administrative credentials).