EUVD-2018-11064

Malware in sbrugna...

CVE-2018-19371

The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system...

Design/Logic Flaw

The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system...

CVE-2018-19371

CVE-2018-19371 concerns the SDL Web Content Manager (Build 8.5.0) where the SaveUserSettings web service is vulnerable to an XML External Entity (XXE) injection. The underlying issue allows an attacker to read sensitive files from the server, leveraging XML values passed to the SaveUserSettings e...