CVE-2018-20222

XXE issue in Airsonic before 10.1.2 during parse...

CVE-2018-20222

Airsonic before 10.1.2 is affected by an XML External Entity (XXE) vulnerability discovered during XML parsing. The issue affects versions prior to 10.1.2; the exact root-cause details are not elaborated in the provided documents. Upgrading to 10.1.2 or newer is the stated remediation. No exploit...