An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...
7.5CVSS5.8AI score0.01232EPSS
SaveExploits1References2
attackerkb•added 2022/06/14 3:15 a.m.•20 views
CVE-2022-31447
An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...
