CVE-2017-9095

XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled during a Subsurface import.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-09-08

Last modified

2024-08-05

Weaknesses

CWE-611

Affected products

• Diving Log (Divinglog)

References

• https://thenopsled.com/divinglog.txt
• https://www.exploit-db.com/exploits/43187/