CVE-2024-21796mediumCWE-611

CVE-2024-21796: falha de média gravidade em Ministry of Defense Electronic Deliverables…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Electronic Deliverables Creation Support Tool

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.5epss 0.2%
Electronic Deliverables Creation Support Tool (Construction Edition) prior to Ver1.0.4 and Electronic Deliverables Creation Support Tool (Design & Survey Edition) prior to Ver1.0.4 improperly restrict XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
Ministry of Defense · Electronic Deliverables Creation Support Tool (Construction Edition)Ministry of Defense · Electronic Deliverables Creation Support Tool (Design & Survey Edition)