medium5.5Public exploit code
CVE-2017-8918
XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely view local files via a crafted template…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Dive Assistant Template Builder 8.0 - XML External Entity Injection2017-05-12 · local · windows
Impact
XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely view local files via a crafted template.xml file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blackwave | Dive Assistant | Version 8.0 |