Privilege escalation

Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-2021-37425...

PT-2021-22162

Name of the Vulnerable Software and Affected Versions Altova MobileTogether Server versions prior to 7.3 SP1 Description The issue concerns XML exponential entity expansion. Recommendations For versions prior to 7.3 SP1, update to version 7.3 SP1 or later to resolve the issue...

CVE-2021-38490: Improper Restriction of Recursive Entity References in DTDs

Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-2021-37425...