Skip to content
OpenAdvisories
Unscored CVE-2016-2340 EUVD-2016-3424GHSA-2rww-wgff-wc7g

The AMF framework in Granite Data Services 3.1.1-SNAPSHOT allows remote authenticated users to read arbitrary files, send TCP requests to i…

Published Mar 25, 2016 · Updated Aug 5, 2024 · Assigned by certcc

Description

The AMF framework in Granite Data Services 3.1.1-SNAPSHOT allows remote authenticated users to read arbitrary files, send TCP requests to intranet servers, or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

References