CVE-2019-19031

Published: Dec 30, 2019Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload.

Affected (1)

Products: Edit Xml: Easy Xml Editor

Edit Xml

1 product

Easy Xml Editor

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Edit Xml Easy Xml Editor	Up to 1.7.8

Related CWEs

CWE-611

Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (4)

http://packetstormsecurity.com/files/155996/Easy-XML-Editor-1.7.8-XML-Injection.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://hackpuntes.com/cve-2019-19031-easy-xml-editor-1-7-8-inyeccion-xml/

Source: cve@mitre.org

ExploitThird Party Advisory

http://packetstormsecurity.com/files/155996/Easy-XML-Editor-1.7.8-XML-Injection.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://hackpuntes.com/cve-2019-19031-easy-xml-editor-1-7-8-inyeccion-xml/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.