medium4.3
CVE-2021-28684
The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the…
Impact
The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Powerarchiver | Powerarchiver | before 20.10.02 |