CVE-2021-30137 in Assyst정보

요약

\~에 의해 MITRE • 2021. 09. 15.

Assyst 10 SP7.5 has authenticated XXE leading to SSRF via XML unmarshalling. The application allows users to send JSON or XML data to the server. It was possible to inject malicious XML data through several access points.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

MITRE

예약하다

2021. 04. 05.

공개

2021. 09. 15.

모더레이션

수락

항목

VDB-182721

CPE

준비됨

CWE

CWE-611 (확인됨)

CVSS

7.7 (CNA)

EPSS

0.00819

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2021-30137
NVD	https://nvd.nist.gov/vuln/detail/CVE-2021-30137
CVE Details	https://www.cvedetails.com/cve/CVE-2021-30137/

◂ 이전 개요 다음 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!