CVE-2021-33208

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file...

CVE-2021-33208

CVE-2021-33208 – MashZone NextGen : Affected product is MashZone NextGen (through 10.7 GA; earlier versions implied by “through 10.7 GA”). The vulnerability is in the admin feature Register an Ehcache Configuration File , caused by an XML external entity (XXE) flaw in processing a malicious XML c...