cve/2018/CVE-2018-9849.md
2024-06-18 02:51:15 +02:00

759 B

CVE-2018-9849

Description

Pulse Secure Pulse Connect Secure 8.1.x before 8.1R14, 8.2.x before 8.2R11, and 8.3.x before 8.3R5 do not properly process nested XML entities, which allows remote attackers to cause a denial of service (memory consumption and memory errors) via a crafted XML document.

POC

Reference

Github

No PoCs found on GitHub currently.