Skip to main content

News Articles

1 CVEs product

Monthly

CVE-2018-1000515 HIGH POC This Week

ventrian News-Articles version NewsArticles.00.09.11 contains a XML External Entity (XXE) vulnerability in News-Articles/API/MetaWebLog/Handler.ashx.vb that can result in Attacker can read any file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XXE News Articles
NVD
CVSS 3.0
7.5
EPSS
1.4%
EPSS 1% CVSS 7.5
HIGH POC This Week

ventrian News-Articles version NewsArticles.00.09.11 contains a XML External Entity (XXE) vulnerability in News-Articles/API/MetaWebLog/Handler.ashx.vb that can result in Attacker can read any file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XXE News Articles
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy