Design/Logic Flaw

2019-07-2621:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.2%

JSON

An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. With a valid administrator account, the “Move / Import / Export Users” screen has an Import Users option. This option accepts a ZIP archive containing a users.xml file that can trigger XXE.

CPENameOperatorVersion
cloud_backup_suitelt8.1.1.50

CPE	Name	Operator	Version
	cloud_backup_suite	lt	8.1.1.50

References

www.wbsec.nl/ahsay/