CVE-2021-20838

CVE-2021-20838 affects Antenna House Office Server Document Converter. Exploitation stems from an XML External Entity (XXE) vulnerability in the PDF/XML processing path, allowing a remote unauthenticated attacker to trigger a DoS by processing a crafted XML document. Affected versions include V7....

CVE-2021-20838

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity XXE attack to cause a denial of service DoS condition by processing a specially crafted XML document...

Multiple improper restriction of XML external entity reference (XXE) vulnerabilities in Office Server Document Converter

Overview Office Server Document Converter provided by Antenna House, Inc. contains multiple improper restriction of XML external entity reference XXE vulnerabilities listed below. Improper restriction of XML external entity reference XXE CWE-611 - CVE-2021-20838 Resource exhaustion in the PDF...