← Back

Mastro

mastro

Vendor: Obdasystems • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-40511
1Obdasystems
1Mastro
Jun 17, 2026
Jun 21, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion (aka “billion laughs”) attack allowing denial of service.
CVE-2021-40510
1Obdasystems
1Mastro
Jun 17, 2026
Jun 21, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
XML eXternal Entity (XXE) in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs.