CVE-2019-1010202

Jeesite 1.2.7 is affected by: XML External Entity (XXE)

published July 23, 2019

CVSS
—
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

Jeesite 1.2.7 is affected by: XML External Entity (XXE). The impact is: sensitive information disclosure. The component is: convertToModel() function in src/main/java/com.thinkgem.jeesite/modules/act/service/ActProcessService.java. The attack vector is: network connectivity,authenticated,must upload a specially crafted xml file. The fixed version is: 4.0 and later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01312 · 70.4th percentile
Published
2019-07-23T13:52Z
EPSS history
Timeline
  • 23 JUL 13:52Z
    Jeesite 1.2.7 is affected by: XML External Entity (XXE)
    cvelistv5