Xxe

2018-12-2015:29:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.9%

JSON

exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.

CPENameOperatorVersion
existlt5.0.0
existeq5.0.0 rc1
existeq5.0.0 rc2
existeq5.0.0 rc3
existeq5.0.0 rc4

Name	Operator	Version
exist	lt	5.0.0
exist	eq	5.0.0 rc1
exist	eq	5.0.0 rc2
exist	eq	5.0.0 rc3
exist	eq	5.0.0 rc4

References

0dd.zone/2018/10/27/exist-XXE/

github.com/eXist-db/exist/issues/2180