Lucene search
Veracode Vulnerability DatabaseVERACODE:20675HistoryJul 08, 2019 - 8:46 a.m.
XML External Entity (XXE)
2019-07-0808:46:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
30.2%
umbraco cms is vulnerable to XML external entity (XXE) attacks. Lack of validation and permitting of external DTDs allow attackers to obtain confidential information via an SSRF from the XXE attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| umbracocms | le | 7.7.2 | |
| umbracocms.core | le | 7.7.2 | |
| umbracocms | le | 7.7.2 | |
| umbracocms.core | le | 7.7.2 |
Related
prion
prion
Xxe
2017-10-12 08:29:00
osv
osv
Umbraco CMS XXE Vulnerability
2022-05-17 00:30:20
CVE-2017-15280
2017-10-12 08:29:00
cve
cve
CVE-2017-15280
2017-10-12 08:29:00
nvd
nvd
CVE-2017-15280
2017-10-12 08:29:00
cvelist
cvelist
CVE-2017-15280
2017-10-12 08:00:00
github
github
Umbraco CMS XXE Vulnerability
2022-05-17 00:30:20