Xxe

2020-09-1818:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.4%

JSON

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The RSS To SMS module processes XML files in an unsafe manner. This opens the application to an XML External Entity attack that can be used to perform SSRF or read arbitrary local files.

CPENameOperatorVersion
ozeki_ng_sms_gatewayle4.17.6

CPE	Name	Operator	Version
	ozeki_ng_sms_gateway	le	4.17.6

References

www.ozeki.hu/index.php?owpn=231

github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14029-XXE-Ozeki%20SMS%20Gateway