Unscored CVE-2021-33208 EUVD-2021-19920GHSA-p9j3-8mpg-p3pf

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML confi…

Published Mar 30, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file.

References

https://www.softwareag.com/corporate/products/az/mashzone_nextgen/default
https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33208