Design/Logic Flaw

2018-10-2912:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. This can also be used for SSRF.

CPENameOperatorVersion
douchateq4.0.4

CPE	Name	Operator	Version
	douchat	eq	4.0.4

References

github.com/AvaterXXX/douchat/blob/master/xxe.md