PT-2018-13454
CVE-2018-16252
·
Published
2018-09-05
·
Updated
2018-12-04
Description by
CVSS 3.1
3.3
LowMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
FsPro Labs Event Log Explorer version 4.6.1.2115
Description
The issue concerns an XML External Entity Injection in the ".elx" file type.
Recommendations
For version 4.6.1.2115, update to a newer version that addresses the XML External Entity Injection issue in the ".elx" file type.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾