Vulnerabilities > CVE-2017-10889 - XXE vulnerability in Tablepress

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
tablepress
CWE-611
NVD
Published: 2017-11-17
Updated: 2017-12-04

Summary

TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.

Vulnerable Configurations

Part Description Count
Application
Tablepress
14

Common Weakness Enumeration (CWE)

References