admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 10:17:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-27193.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

817 B
Raw Permalink Blame History

CVE-2022-27193

Description

CVRF-CSAF-Converter before 1.0.0-rc2 resolves XML External Entities (XXE). This leads to the inclusion of arbitrary (local) file content into the generated output document. An attacker can exploit this to disclose information from the system running the converter.

POC

Reference

Github