Vendor
reportportal
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.5
XXE vulnerability on Launch import with externally-defined DTD file
Report portal is an open source reporting and analysis framework. Starting from version 3.1.0 of the service-api XML parsing was introduced. Unfortunately the XML parser was not configured properly to prevent XML external entity (XXE) attacks. This allows a u…