Description (CNA)
Mustang before 2.16.3 allows exfiltrating files via XXE attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| mustangproject / Mustang | affected 0 before 2.16.3 |
CWE
CWE-611
References
- https://github.com/ZUGFeRD/mustangproject/issues/685
- https://github.com/ZUGFeRD/mustangproject/pull/725
- https://github.com/ZUGFeRD/mustangproject/releases/tag/core-2.16.3
ADP enrichment
No English description supplied.
No references supplied.