Lucene search
+L

4 matches found

NVD
NVD
added 2019/04/25 1:29 p.m.14 views

CVE-2019-11519

Libraries/Nop.Services/Localization/LocalizationService.cs in nopCommerce through 4.10 allows XXE via the "Configurations - Languages - Edit Language - Import Resources - Upload XML file" screen...

4.9CVSS5.2AI score0.01214EPSS
SaveExploits1References2
OSV
OSV
added 2019/04/25 1:29 p.m.15 views

CVE-2019-11519

Libraries/Nop.Services/Localization/LocalizationService.cs in nopCommerce through 4.10 allows XXE via the "Configurations - Languages - Edit Language - Import Resources - Upload XML file" screen...

4.9CVSS6.9AI score
SaveExploits0References2
Cvelist
Cvelist
added 2019/04/25 12:44 p.m.17 views

CVE-2019-11519

Libraries/Nop.Services/Localization/LocalizationService.cs in nopCommerce through 4.10 allows XXE via the "Configurations - Languages - Edit Language - Import Resources - Upload XML file" screen...

5.2AI score0.01214EPSS
SaveExploits1References2
CVE
CVE
added 2019/04/25 12:44 p.m.46 views

CVE-2019-11519

nopCommerce up to version 4.10 is affected by an XML External Entity (XXE) vulnerability in Libraries/Nop.Services/Localization/LocalizationService.cs. The issue is exposed via the Import Resources flow on Configurations -> Languages -> Edit Language -> Upload XML file, enabling an XXE c...

4.9CVSS5.1AI score0.01214EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder