LeviStudioU up to 2019-09-21 Parameter xml external entity reference

entryeditHistoryDiffjsonxmlCTI

A vulnerability, which was classified as critical, was found in LeviStudioU up to 2019-09-21. This affects an unknown code block of the component Parameter Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10659578	11/26/2020	VulD...	cve_nvd_summary	An XXE vulnerability exists within LeviStudioU Release Build 2019-09-21 and prior when processing parameter entities, which may allow file disclosure.	cve.mitre.org	11/26/2020	accepted	70
10659577	11/26/2020	VulD...	cve_assigned	1599170400	cve.mitre.org	11/26/2020	accepted	70
10556015	10/23/2020	VulD...	price_0day	$0-$5k	see documentation	10/23/2020	accepted	90
10556014	10/23/2020	VulD...	cvss3_meta_tempscore	5.5	see documentation	10/23/2020	accepted	90
10556013	10/23/2020	VulD...	cvss3_meta_basescore	5.5	see documentation	10/23/2020	accepted	90
10556012	10/23/2020	VulD...	cvss3_vuldb_tempscore	5.5		10/23/2020	accepted	90
10556011	10/23/2020	VulD...	cvss3_vuldb_basescore	5.5		10/23/2020	accepted	90
10556010	10/23/2020	VulD...	cvss2_vuldb_tempscore	4.9		10/23/2020	accepted	90
10556009	10/23/2020	VulD...	cvss2_vuldb_basescore	4.9		10/23/2020	accepted	90
10556008	10/23/2020	VulD...	cvss3_vuldb_rc	X	derived from historical data	10/23/2020	accepted	80
10556007	10/23/2020	VulD...	cvss3_vuldb_rl	X	derived from historical data	10/23/2020	accepted	80
10556006	10/23/2020	VulD...	cvss3_vuldb_e	X	derived from historical data	10/23/2020	accepted	80
10556005	10/23/2020	VulD...	cvss3_vuldb_a	L	derived from historical data	10/23/2020	accepted	80
10556004	10/23/2020	VulD...	cvss3_vuldb_i	L	derived from historical data	10/23/2020	accepted	80
10556003	10/23/2020	VulD...	cvss3_vuldb_c	L	derived from historical data	10/23/2020	accepted	80
10556002	10/23/2020	VulD...	cvss3_vuldb_s	U	derived from historical data	10/23/2020	accepted	80
10556001	10/23/2020	VulD...	cvss3_vuldb_ui	N	derived from historical data	10/23/2020	accepted	80
10556000	10/23/2020	VulD...	cvss3_vuldb_pr	L	derived from historical data	10/23/2020	accepted	80
10555999	10/23/2020	VulD...	cvss3_vuldb_ac	L	derived from historical data	10/23/2020	accepted	80
10555998	10/23/2020	VulD...	cvss3_vuldb_av	A	derived from historical data	10/23/2020	accepted	80