CVE-2021-40511

The CVE concerns OBDA systems Mastro 1.0, vulnerable to XML Entity Expansion (billion laughs) that enables denial of service. The root cause is XML entity expansion handling in Mastro 1.0, enabling resource exhaustion. Documented impact is a denial of service; no public exploit details or patch/v...

CVE-2021-40510

CVE-2021-40510 affects OBDA system Mastro 1.0. It is an XML External Entity (XXE) vulnerability that allows remote attackers to read system files via crafted DTDs. The NVD entry indicates network access with low complexity and no authentication (CVSS3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; base ...