Description
The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).
Unscored
CVE-2021-28684
EUVD-2021-15341GHSA-f243-hqpc-893w
The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of …
Published Jun 21, 2021 · Updated Aug 3, 2024 · Assigned by mitre