1 result · Clear filters · Feed
-
High —
ezsystems/ezplatform-richtext allows access to external entities in XML
### Impact This security advisory resolves a vulnerability in the RichText field type. By entering a maliciously crafted input into the RichText XML, an attacker could perform an attack using XML external entity (XXE) injection, which might be able to read fi…