PT-2017-18122
CVE-2017-8110
·
تاريخ النشر
2017-04-25
·
تاريخ التحديث
2020-07-07
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
modified eCommerce Shopsoftware version 2.0.2.2 rev 10690
Description
The issue concerns an XXE (XML External Entity) vulnerability. It is located in the "api/it-recht-kanzlei/api-it-recht-kanzlei.php" API endpoint.
Recommendations
For version 2.0.2.2 rev 10690, as a temporary workaround, consider restricting access to the "api/it-recht-kanzlei/api-it-recht-kanzlei.php" API endpoint until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾