CVE-2019-19144

The Quantum DXi6702 backup and deduplication appliance, specifically version 2.3.0.3 (11449-53631 Build304) , is vulnerable to an XML External Entity Injection (XXE) vulnerability. The root cause is the improper limitation of XML links to external objects within the /rest/Users?action=authenticat...