CVE-2019-19031

Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection

published December 30, 2019

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05206 · 92.5th percentile
Published
2019-12-30T19:12Z
EPSS history
Timeline
  • 30 DEC 19:12Z
    Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection
    cvelistv5