critical9.1
CVE-2018-15805
Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause …
Impact
Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Accusoft | Prizmdoc | before 13.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://help.accusoft.com/PrizmDoc/v13.5/HTML/webframe.html#Release_v13_5.html
- https://medium.com/%40mrnikhilsri/oob-xxe-in-prizmdoc-cve-2018-15805-dfb1e474345c
- https://help.accusoft.com/PrizmDoc/v13.5/HTML/webframe.html#Release_v13_5.html
- https://medium.com/%40mrnikhilsri/oob-xxe-in-prizmdoc-cve-2018-15805-dfb1e474345c