Description

TopQuadrant TopBraid EDG before version 8.0.1 allows an authenticated attacker to upload an XML DTD file and execute JavaScript to read local files or access URLs (XXE). Fixed in 8.0.1 (bug fix: TBS-6721).

Related CPE's

Could not find any relations

References

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2024/va-24-254-02.json

https://www.topquadrant.com/wp-content/uploads/2024/06/changelog-8.0.1.txt

Weaknesses

9119a7d8-5eab-497f-8521-727c672e3725

Secondary
CWE-611

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

5 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

9119a7d8-5eab-497f-8521-727c672e3725

Vulnerability status

Awaiting analysis

Published

2024-09-27T16:15:05.037

2 weeks ago

Last modified

2024-09-30T12:45:57.823

2 weeks ago