CVE-2021-33208

Published
View on NVD ↗
CVSS v3
7.2
HIGH
CVSS v2
6.5
MEDIUM
Affected
1
PROJECT

Description

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file.

Advisories and Proofs of Concept by BlackArrow
GitHubGitHub
19