CVE-2024-45745
TopQuadrant TopBraid EDG JavaScript console XXE
- State
- Published
- Severity
- 5.0 Medium
- Published
- Sep 27, 2024
- Updated
- Sep 27, 2024
- Reserved
- Sep 5, 2024
Description
TopQuadrant TopBraid EDG before version 8.0.1 allows an authenticated attacker to upload an XML DTD file and execute JavaScript to read local files or access URLs (XXE). Fixed in 8.0.1 (bug fix: TBS-6721).
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.0 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N | cisa-cg |
Weaknesses
- CWE-611 Improper Restriction of XML External Entity Reference
Affected Products
| Product | Versions |
|---|---|
TopBraid EDGTopQuadrant |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.