Lucene search
+L

2 matches found

OSV
OSV
added 2025/04/10 12:25 p.m.4 views

GHSA-2JQJ-5QV2-XVCG ezsystems/ezplatform-richtext allows access to external entities in XML

Impact This security advisory resolves a vulnerability in the RichText field type. By entering a maliciously crafted input into the RichText XML, an attacker could perform an attack using XML external entity XXE injection, which might be able to read files on the server. To exploit this...

7.1CVSS6.6AI score
SaveExploits0References4
Rows per page
Query Builder