PT-2017-7193 · Milton · Milton Webdav

Published 2017-06-07 · Updated 2018-10-09 · CVE-2015-7326

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Milton Webdav versions prior to 2.7.0.3

Description The issue is related to an XML External Entity (XXE) vulnerability. This type of vulnerability allows attackers to access local files, potentially leading to sensitive data exposure or other malicious activities.

Recommendations For versions prior to 2.7.0.3, update to version 2.7.0.3 or later to resolve the issue.

Exploit

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2015-7326

Affected Products

Milton Webdav

References · 7

• 🔥 http://packetstormsecurity.com/files/134178/Milton-Webdav-2.7.0.1-XXE-Injection.html · Exploit
• https://github.com/miltonio/milton2/commit/b5851c1 · Patch
• https://github.com/miltonio/milton2/commit/5f81b0c48a817d4337d8b0e99ea0b4744ecd720b · Patch
• https://github.com/miltonio/milton2/commit/b41072b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-7326 · Security Note
• http://securityfocus.com/bid/77392 · Note
• http://securityfocus.com/archive/1/536813/100/0/threaded · Note