CVE-2017-6895

CVE-2017-6895 concerns the USB Pratirodh tool, which is prone to an XML External Entity (XXE) injection via the usb.xml input. The underlying cause is the XML parser handling untrusted XML data in usb.xml insecurely, enabling XXE. Documented impacts include potential information disclosure and de...

USB Pratirodh XXE Injection

--001a113ff018269a92054ac84a6a Content-Type: text/plain; charset=UTF-8 Vulnerability Title: USB Pratirodh XML External Entity Injection Vulnerability Affected Product: USB Pratirodh Product Homepage: https://cdac.in/index.aspx?id=csepsusbpra CVE-ID : CVE-2017-6895 Severity: Medium Class: XXE...