Beveiligingsadvies

CVE-2024-21796

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-24 01:32:53

Laatst bijgewerkt 2024-09-10 18:01:34

Toegewezen door jpcert

CVSS-score 5.5

Status PUBLISHED

Beschrijving

Electronic Deliverables Creation Support Tool (Construction Edition) prior to Ver1.0.4 and Electronic Deliverables Creation Support Tool (Design & Survey Edition) prior to Ver1.0.4 improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.

← Alle CVE's bekijken Bekijk op cve.org ↗