XML External Entity vulnerability in MODX CMS
A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.7.3 which can lead to an information disclosure or denial of service (DOS).
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25911US | critical9.1 | — | ||
A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.7.3 which can lead to an information disclosure or denial of service (… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/dahua966/Vul_disclose/blob/main/XXE_modxcms.mdWEB
- https://github.com/modxcms/revolutionPACKAGE
- https://github.com/modxcms/revolution/issues/15237WEB
- https://github.com/modxcms/revolution/pull/15238WEB
- https://github.com/modxcms/revolution/pull/15238/commits/1b7ffe02df30f05dbf67dd15e4d8101687c1585aWEB
- https://nvd.nist.gov/vuln/detail/CVE-2020-25911ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan