Enhancement: cves/2018/CVE-2018-8033.yaml by mp
parent
adc0c8523b
commit
943d342c4c
|
@ -1,12 +1,13 @@
|
|||
id: CVE-2018-8033
|
||||
|
||||
info:
|
||||
name: Apache OFBiz XXEtes
|
||||
name: Apache OFBiz 16.11.04 - XML Entity Injection
|
||||
author: pikpikcu
|
||||
severity: high
|
||||
description: XXE injection (file disclosure) exploit for Apache OFBiz 16.11.04
|
||||
description: Apache OFBiz 16.11.04 is susceptible to XML external entity injection (XXE injection).
|
||||
reference:
|
||||
- https://lists.apache.org/thread.html/e8fb551e86e901932081f81ee9985bb72052b4d412f23d89b1282777@%3Cuser.ofbiz.apache.org%3E
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2018-8033
|
||||
classification:
|
||||
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
||||
cvss-score: 7.5
|
||||
|
|
Loading…
Reference in New Issue