A XSLT Server Side injection vulnerability in the Import...
Critical severity
Unreviewed
Published
Feb 16, 2024
to the GitHub Advisory Database
•
Updated Jan 13, 2025
Description
Published by the National Vulnerability Database
Feb 16, 2024
Published to the GitHub Advisory Database
Feb 16, 2024
Last updated
Jan 13, 2025
A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 allows attackers to execute arbitrary commands via a crafted XSLT file.
References