5 matches found
CVE-2019-19144
XML External Entity Injection vulnerability in Quantum DXi6702 2.3.0.3 11449-53631 Build304 devices via rest/Users?action=authenticate...
CVE-2019-19144
creationtimestamp| type| source ---|---|--- 2025-08-01 19:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvednmr23r2s...
CVE-2019-19144
XML External Entity Injection vulnerability in Quantum DXi6702 2.3.0.3 11449-53631 Build304 devices via rest/Users?action=authenticate...
CVE-2019-19144
The Quantum DXi6702 backup and deduplication appliance, specifically version 2.3.0.3 (11449-53631 Build304) , is vulnerable to an XML External Entity Injection (XXE) vulnerability. The root cause is the improper limitation of XML links to external objects within the /rest/Users?action=authenticat...
