PT-2017-7193 · Milton · Milton Webdav

Publicado 2017-06-07 · Atualizado 2018-10-09 · CVE-2015-7326

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Milton Webdav versions prior to 2.7.0.3

Description The issue is related to an XML External Entity (XXE) vulnerability. This type of vulnerability allows attackers to access local files, potentially leading to sensitive data exposure or other malicious activities.

Recommendations For versions prior to 2.7.0.3, update to version 2.7.0.3 or later to resolve the issue.

Exploit

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2015-7326

Produtos afetados

Milton Webdav

Referências · 7

• 🔥 http://packetstormsecurity.com/files/134178/Milton-Webdav-2.7.0.1-XXE-Injection.html · Exploit
• https://github.com/miltonio/milton2/commit/b5851c1 · Correção
• https://github.com/miltonio/milton2/commit/5f81b0c48a817d4337d8b0e99ea0b4744ecd720b · Correção
• https://github.com/miltonio/milton2/commit/b41072b · Correção
• http://securityfocus.com/bid/77392 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7326 · Nota de Segurança
• http://securityfocus.com/archive/1/536813/100/0/threaded · Nota