Beveiligingsadvies

CVE-2025-35112

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-26 22:19:20
Laatst bijgewerkt 2025-08-29 18:26:12
Toegewezen door cisa-cg
CVSS-score 5.1
Status PUBLISHED

Beschrijving

Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31.