← voltar
CVE-2024-29010

CVE-2024-29010

CVSS 7.1 HIGHEPSS 0.6%CWE-611
The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentially resulting in the disclosure of sensitive information. This issue affects GMS: 9.3.4 and earlier versions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Produtos afetados
SonicWall · GMS

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0007