CVE-2017-1000496

2018-01-0314:00:00

mitre

www.cve.org

commsy version 9.0.0

xxe attacks

configuration import

denial of service

remote code execution

AI Score

8.7

Confidence

High

EPSS

0.007

Percentile

80.3%

JSON

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code.

References

github.com/commsy/commsy/issues/2