CVE-2024-8010

The component accepts XML input through the publisher without disabling external entity resolution. This allows malicious actors to submit a crafted XML payload that exploits the unescaped external entity references. By leveraging this vulnerability, a malicious actor can read confidential files...

CVE-2025-3021

CVE-2025-3021 is a path traversal vulnerability in e-solutions e-management. The issue allows an attacker to access confidential files outside the intended scope by manipulating the file parameter in the /downloadReport.php endpoint. The CVSS 4.0 base shows a high impact (8.7) with network attack...