Description
An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file.
Unscored
CVE-2022-31447
EUVD-2022-52917GHSA-w4fh-4pm9-qpfq
An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a craft…
Published Jun 14, 2022 · Updated Aug 3, 2024 · Assigned by mitre