Description (CNA)
Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| North Grid Corporation / Proself Enterprise/Standard Edition | affected Ver5.62 and earlier |
| North Grid Corporation / Proself Gateway Edition | affected Ver1.65 and earlier |
| North Grid Corporation / Proself Mail Sanitize Edition | affected Ver1.08 and earlier |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No English description supplied.