CVE-2019-17323 in REXPERT

Résumé

par MITRE

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Réserver: 07/10/2019
• Modérer: accepté
• Entrée: VDB-144687
• CPE: prêt
• CWE: CWE-91 (confirmé)
• CVSS: 8.8 (NVD)
• EPSS: 0.01594
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-17323
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-17323
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-17323/