Obdasystems

obdasystems

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-40511 1Obdasystems 1Mastro Jun 17, 2026 Jun 21, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion (aka “billion laughs”) attack allowing denial of service.
CVE-2021-40510 1Obdasystems 1Mastro Jun 17, 2026 Jun 21, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 XML eXternal Entity (XXE) in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs.