CVE-2015-10029CWE-611

kelvinmo simplexrd simplexrd.class.php xml external entity reference

Medium · published January 7, 2023

CVSS v3.1
5.5
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is identified as 4c9f2e028523ed705b555eca2c18c64e71f1a35d. It is recommended to upgrade the affected component. VDB-217630 is the identifier assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00848 · 57.4th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2023-01-07T19:36Z
EPSS history
Timeline
  • 07 JAN 19:36Z
    kelvinmo simplexrd simplexrd.class.php xml external entity reference
    cvelistv5