Security Advisory

CVE-2021-27931

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-03-03 19:38:12

Last updated 2024-08-03 21:33:16

Assigner mitre

State PUBLISHED

Description

LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service.

← Browse all CVEs View on cve.org ↗