CVE-2023-49234

CVSS 6.3 MEDIUMEPSS 0.2%CWE-611

An XML external entity (XXE) vulnerability was found in Stilog Visual Planning 8. It allows an authenticated attacker to access local server files and exfiltrate data to an external server.

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Productos afectados

n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://seclists.org/fulldisclosure/2024/Apr/3 https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-006.txt https://www.schutzwerk.com/blog/schutzwerk-sa-2023-006/https://www.visual-planning.com/en/support-portal/updates