Vulnerabilities > CVE-2021-40510 - XXE vulnerability in Obdasystems Mastro 1.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
obdasystems
CWE-611

Summary

XML eXternal Entity (XXE) in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs.

Vulnerable Configurations

Part Description Count
Application
Obdasystems
1