high7.5
CVE-2022-31447
An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file.
Impact
An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Magicpin | Magicpin | Version 3.4 |