CVE-2021-30137 in Assystinfo

Zusammenfassung

von MITRE • 15.09.2021

Assyst 10 SP7.5 has authenticated XXE leading to SSRF via XML unmarshalling. The application allows users to send JSON or XML data to the server. It was possible to inject malicious XML data through several access points.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

MITRE

Reservieren

05.04.2021

Veröffentlichung

15.09.2021

Moderieren

akzeptiert

Eintrag

VDB-182721

CPE

bereit

EPSS

0.00819

KEV

nein

Aktivitäten

very low

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2021-30137
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2021-30137
CVE Detailshttps://www.cvedetails.com/cve/CVE-2021-30137/

◂ ZurückÜbersichtWeiter ▸

Interested in the pricing of exploits?

See the underground prices here!