CVE-2017-6344 XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.
MediumCVSS 5.9
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| grails pdf plugin | = 0.6 | No fix listed |
References
- 96446 third-party-advisory vdb-entry
- www.ambionics.io exploit third-party-advisory