PT-2017-18122 · Modified Ecommerce · Modified Ecommerce Shopsoftware
CVE-2017-8110
·
Publicado
2017-04-25
·
Atualizado
2020-07-07
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
modified eCommerce Shopsoftware version 2.0.2.2 rev 10690
Description
The issue concerns an XXE (XML External Entity) vulnerability. It is located in the "api/it-recht-kanzlei/api-it-recht-kanzlei.php" API endpoint.
Recommendations
For version 2.0.2.2 rev 10690, as a temporary workaround, consider restricting access to the "api/it-recht-kanzlei/api-it-recht-kanzlei.php" API endpoint until a patch is available.
Correção
XXE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Modified Ecommerce Shopsoftware