Security Advisory

CVE-2021-28684

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-21 12:13:26
Last updated 2024-08-03 21:47:33
Assigner mitre
State PUBLISHED

Description

The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).