Server side request forgery (ssrf)

2019-04-2314:29:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

JSON

An XML external entity (XXE) vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

CPENameOperatorVersion
printeronle4.1.4

CPE	Name	Operator	Version
	printeron	le	4.1.4

References

github.com/DrunkenShells/Disclosures/tree/master/CVE-2018-17169-XXE-PrinterON