CVE-2015-10029mediumCWE-611

CVE-2015-10029: medium-severity vulnerability in kelvinmo simplexrd

kelvinmo simplexrd simplexrd.class.php xml external entity reference

Published 07 Jan 2023 · Updated 09 Apr 2025

Follow this CVE + Monitor simplexrd + Monitor kelvinmo/simplexrd

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.8%

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is identified as 4c9f2e028523ed705b555eca2c18c64e71f1a35d. It is recommended to upgrade the affected component. VDB-217630 is the identifier assigned to this vulnerability.

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

kelvinmo · simplexrd

References

https://github.com/kelvinmo/simplexrd/commit/4c9f2e028523ed705b555eca2c18c64e71f1a35d https://github.com/kelvinmo/simplexrd/releases/tag/v3.1.1 https://vuldb.com/?ctiid.217630 https://vuldb.com/?id.217630