CVE-2024-45745CWE-611

TopQuadrant TopBraid EDG JavaScript console XXE

Medium · published September 27, 2024

CVSS v3.1
5.0
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

TopQuadrant TopBraid EDG before version 8.0.1 allows an authenticated attacker to upload an XML DTD file and execute JavaScript to read local files or access URLs (XXE). Fixed in 8.0.1 (bug fix: TBS-6721).

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00278 · 19.2th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2024-09-27T15:57Z
EPSS history
Timeline
  • 27 SEP 15:57Z
    TopQuadrant TopBraid EDG JavaScript console XXE
    cvelistv5