tafamace/CVE-2016-6798

PoC

view exploit source poc_in_githubauthor tafamacepublished 2018-11-19catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-6798US	critical9.8	3.67% (90th)	Exploit	2017-07-19
In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses an insecure SAX parser to validate the input string, which allows for XXE attacks…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.