3 matches found
CVE-2023-0871
creationtimestamp| type| source ---|---|--- 2023-08-11 20:16:42+00:00| seen| https://t.me/cibsecurity/68375 2023-08-15 16:12:09+00:00| seen| https://t.me/ctinow/130691...
CVE-2023-0871
XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity XXE injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to internal and external services. The solution...
CVE-2023-0871
XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity XXE injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to internal and external services. The solution...