CVE-2021-28684

Publication date

2021-06-21 12:13:26

Family

mitre

State

PUBLISHED

Description

The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).