An XML External Entity (XXE) vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read arbitrary files.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-10-14T14:17:37
Updated: 2024-08-04T14:15:28.631Z
Reserved: 2020-08-13T00:00:00
Link: CVE-2020-19954
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-10-14T15:15:08.503
Modified: 2024-11-21T05:09:30.597
Link: CVE-2020-19954
Redhat
No data.