Code injection

2020-01-2119:15:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

65.1%

The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack.

CPENameOperatorVersion
xmindle3.4.1

CPE	Name	Operator	Version
	xmind	le	3.4.1

References

web.archive.org/web/20160822124252/rampartssecurity.com/docs/Xmind-MITM.pdf