CVE-2018-10832

ModbusPal 1.6b is vulnerable to an XML External Entity (XXE) injection in XML-based project/automation files (.xmpp, .xmpa). The root cause is XXE processing allowing a remote attacker to exfiltrate local file contents when a crafted file is opened/imported. This is documented across multiple sou...