Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-22219

Aug. 15, 2024, 6:15 p.m.

Product(s) Impacted

XML JDBC

  • up to 1.0.4

Terminalfour

  • 8.0.0001 - 8.3.18

Description

XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated users to submit malicious XML via unspecified features which could lead to various actions such as accessing the underlying server, remote code execution (RCE), or performing Server-Side Request Forgery (SSRF) attacks.

Weaknesses

Date

Published: Aug. 15, 2024, 6:15 p.m.

Last Modified: Aug. 15, 2024, 6:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References