Back to search
CVE-2022-27193
Published: Mar 15, 2022
Modified: Aug 3, 2024
PUBLISHED
CVSS v3.1
6.1
MEDIUM
Description
CVRF-CSAF-Converter before 1.0.0-rc2 resolves XML External Entities (XXE). This leads to the inclusion of arbitrary (local) file content into the generated output document. An attacker can exploit this to disclose information from the system running the converter.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AC:L/AV:L/A:L/C:H/I:N/PR:N/S:U/UI:R
Attack Complexity
Low
Attack Vector
Local
Availability
Low
Confidentiality
High
Integrity
None
Privileges Required
None
Scope
Unchanged
User Interaction
Required
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now