Paper/Archive/CVE-2021-27931

CVE-2021-27931

mitre — LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp.

EPSS 18%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 97.2.972 × 2019.4 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References

refgithub.com/sl4cky/LumisXP-XXE---POC/blob/main/poc.txt