An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...
7.5CVSS7.1AI score0.01197EPSS
SaveExploits1References3
OSV•added 2022/06/14 3:15 a.m.•9 views
CVE-2022-31447
An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...
