CVE-2017-1000496

2018-01-0314:29:00

Google

osv.dev

AI Score

8.8

Confidence

High

EPSS

0.007

Percentile

80.3%

JSON

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code.

References

github.com/commsy/commsy/issues/2