CVE-2021-33208

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file

published March 30, 2022

CVSS
—
EPSS
1%
Percentile
66.6
In the wild
Unconfirmed
What it is

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01151 · 66.6th percentile
Published
2022-03-30T21:52Z
EPSS history
Timeline
  • 30 MAR 21:52Z
    The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file
    cvelistv5