Description
A vulnerability was determined in Jinher OA 2.0. The impacted element is an unknown function of the file /c6/Jhsoft.Web.module/ToolBar/ManageWord.aspx/?text=GetUrl&style=1. This manipulation causes xml external entity reference. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jinher | OA | 2.0 | — |
References
- VDB-325982 | Jinher OA text xml external entity reference vdb-entry
- VDB-325982 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #658253 | Jinher OA V2.0 XML External Entity Reference third-party-advisory
- https://github.com/frwfxc123/CVE/issues/1 exploit issue-tracking