PT-2017-11583 · Tablepress · Tablepress

Yuji Tounai · Published 2017-11-17 · Updated 2017-12-04 · CVE-2017-10889

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TablePress versions prior to 1.8.1

Description The issue allows an attacker to conduct XML External Entity (XXE) attacks. XXE attacks occur when an application parses XML input that contains external entities, which can lead to unauthorized access to sensitive data or systems.

Recommendations For versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue.

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2017-10889

Affected Products

Tablepress

References · 5

• https://osv.dev/vulnerability/CVE-2017-10889 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-10889 · Security Note
• https://wordpress.org/plugins/tablepress/#developers · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10889 · Note
• https://jvn.jp/en/jp/JVN05398317/index.html · Note