CVE-2019-19144

XML External Entity Injection vulnerability in Quantum DXi6702 2.3.0.3 11449-53631 Build304 devices via rest/Users?action=authenticate...

CVE-2019-19144

creationtimestamp| type| source ---|---|--- 2025-08-01 19:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvednmr23r2s...

CVE-2019-19144

XML External Entity Injection vulnerability in Quantum DXi6702 2.3.0.3 11449-53631 Build304 devices via rest/Users?action=authenticate...

CVE-2019-19144

XML External Entity Injection vulnerability in Quantum DXi6702 2.3.0.3 11449-53631 Build304 devices via rest/Users?action=authenticate...

CVE-2019-19144

The Quantum DXi6702 disk backup and deduplication appliance (version 2.3.0.3 (11449-53631 Build304) ) is vulnerable to an XML External Entity (XXE) Injection vulnerability. The flaw exists in the /rest/Users?action=authenticate API endpoint due to improper restrictions on XML links to external ob...