Xxe

2020-08-2115:15:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.5%

JSON

Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition (DTD) in an XML request.

References

ioac.tv/3hy1xu6

ioactive.com/moog-exo-series-multiple-vulnerabilities/