The vulnerability of the ResponseParser method in Inductive Automation Ignition’s software for industrial automation allows a perpetrator to execute arbitrary code.

The vulnerability of the ResponseParser method in Inductive Automation Ignition software relates to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

XML External Entity (XXE) Injection

aXMLRPC is vulnerable to XML external entity attacks. The vulnerability exists because the library does not properly validate the XML documents submitted by the users via the parse function of ResponseParser.java, allowing an attacker to inject malicious XML documents to perform requests on behal...