PT-2018-5242
CVE-2017-1000477
·
Published
2018-01-03
·
Updated
2022-05-14
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
XMLBundle version 0.1.7
Description
The issue allows for XXE attacks, which can lead to denial of service attacks.
Recommendations
For XMLBundle version 0.1.7, consider disabling the XML parsing functionality to prevent XXE attacks until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾