Skip to content
OpenAdvisories

Vendor

reportportal

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5

    XXE vulnerability on Launch import with externally-defined DTD file

    Report portal is an open source reporting and analysis framework. Starting from version 3.1.0 of the service-api XML parsing was introduced. Unfortunately the XML parser was not configured properly to prevent XML external entity (XXE) attacks. This allows a u…