PT-2022-10219

Name of the Vulnerable Software and Affected Versions MashZone NextGen versions through 10.7 GA Description The issue allows XXE attacks via a malicious XML configuration file, specifically through the "Register an Ehcache Configuration File" admin feature. Recommendations For MashZone NextGen...

CVE-2021-33208: Improper Restriction of XML External Entity Reference

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file...