Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2018/12/20 10:2 p.m.35 views

exist-db:exist-core XML External Entity (XXE) vulnerability

exist version = 5.0.0-RC4 contains a XML External Entity XXE vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning...

10CVSS3.9AI score0.01879EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2018/12/20 10:2 p.m.42 views

GHSA-JXM5-5XCW-H57Q exist-db:exist-core XML External Entity (XXE) vulnerability

exist version = 5.0.0-RC4 contains a XML External Entity XXE vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning...

10CVSS9.4AI score0.01879EPSS
SaveExploits0References9
Rows per page
Query Builder