CVE-2018-15805

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).

Score

CVSS 3.0 9.1 Critical

Status

Modified - cve@mitre.org

Published

2018-12-10

Last modified

2024-08-05

Weaknesses

CWE-611

Affected products

• Prizmdoc (Accusoft)

References

• https://help.accusoft.com/PrizmDoc/v13.5/HTML/webframe.html#Release_v13_5.html
• https://medium.com/%40mrnikhilsri/oob-xxe-in-prizmdoc-cve-2018-15805-dfb1e474345c