CVE-2022-31447

Name of the Vulnerable Software and Affected Versions Magicpin version 3.4

Description An XML external entity (XXE) injection vulnerability allows attackers to access sensitive database information via a crafted SVG file.

Recommendations For Magicpin version 3.4, update to a version that fixes the XML external entity injection vulnerability to prevent attackers from accessing sensitive database information. As a temporary workaround, consider restricting the processing of SVG files to minimize the risk of exploitation.