EUVD-2018-10135

Malware in sbrugna...

CVE-2018-18406: Improper Restriction of XML External Entity Reference

An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179Final. The Audit Report module is affected by a blind XXE vulnerability when a new Best Practices Report is saved using a special payload inside the xml input field. The XXE vulnerability is blind since the response...