Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-11519
4
MEDIUMCVSS v2
Published
April 25, 2019
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Libraries/Nop.Services/Localization/LocalizationService.cs in nopCommerce through 4.10 allows XXE via the "Configurations -> Languages -> Edit Language -> Import Resources -> Upload XML file" screen.
nopSolutions/nopCommerce
GitHubASP.NET Core eCommerce software. nopCommerce is a free and open-source shopping cart.
GitHubASP.NET Core eCommerce software. nopCommerce is a free and open-source shopping cart.<= 4.10NVD