Description
XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
Unscored
CVE-2014-3244
EUVD-2014-3258GHSA-7wgc-prfc-r69w
XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17 allows remote attackers to read arbitrary files…
Published Feb 1, 2018 · Updated Aug 6, 2024 · Assigned by mitre