CVE-2021-28684

The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the…

published June 21, 2021

CVSS
—
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00918 · 59.8th percentile
Published
2021-06-21T12:13Z
EPSS history
Timeline
  • 21 JUN 12:13Z
    The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the…
    cvelistv5