Xxe

2023-07-0309:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

processing sanitization

zip files

execute commands

system privileges

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON

A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external commands used to control the process execution of the .zip application allows an authorized user to obtain control of the .zip application to execute arbitrary commands or obtain elevation of system privileges.

CPENameOperatorVersion
enterprise_security_managerlt11.6.7

CPE	Name	Operator	Version
	enterprise_security_manager	lt	11.6.7

References

kcm.trellix.com/corporate/index?page=content&id=SB10403