PT-2023-10208 · Kelvinmo · Simplexrd

Kelvinmo · Publicado 2023-01-07 · Atualizado 2024-05-17 · CVE-2015-10029

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions kelvinmo simplexrd versions up to 3.1.0

Description A vulnerability was found in the file simplexrd/simplexrd.class.php, which leads to xml external entity reference. This issue affects unknown code and can be addressed by upgrading to version 3.1.1.

Recommendations For kelvinmo simplexrd versions up to 3.1.0, upgrade to version 3.1.1 to address the issue. As a temporary workaround, consider restricting access to the simplexrd/simplexrd.class.php file until the upgrade is applied.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2015-10029

GHSA-RH3M-PR36-XH2F

Produtos afetados

Simplexrd

Referências · 9

• https://github.com/kelvinmo/simplexrd · Nota
• https://github.com/kelvinmo/simplexrd/releases/tag/v3.1.1 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2015-10029 · Nota de Segurança
• https://vuldb.com/?id.217630 · Nota
• https://t.me/cvenotify/41506 · Publicação no Telegram
• https://vuldb.com/?ctiid.217630 · Nota
• https://t.me/cibsecurity/56123 · Publicação no Telegram
• https://github.com/kelvinmo/simplexrd/commit/4c9f2e028523ed705b555eca2c18c64e71f1a35d · Correção
• https://osv.dev/vulnerability/GHSA-rh3m-pr36-xh2f · Aviso do Fabricante