CVE-2017-8918

XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely view local files via a crafted template.xml file.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-09-12

Last modified

2024-08-05

Weaknesses

CWE-611

Affected products

• Dive Assistant (Blackwave)

References

• https://thenopsled.com/Exploit-DB%20Writeup.txt