Pesquisadores
Voltar
Ahmet Gurel
#27705
de 60,596
9.8
CVSS total
Vulnerabilidades
·
1
PT-2018-10685
2018-06-05
9.8
CVE-2018-11586
Searchblox
Searchblox
A XML external entity (XXE) issue in the `api/rest/status` endpoint allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks by sending a crafted DTD in an XML request.