Code injection

2018-01-0314:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.5%

JSON

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code.

CPENameOperatorVersion
commsyeq9.0.0

CPE	Name	Operator	Version
	commsy	eq	9.0.0

References

github.com/commsy/commsy/issues/2