Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Java XML parser in Echo before 2.1.1 and 3.x before 3.0.b6 allows remote attackers to read arbitrary files via a request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Echo Java XML解析器输入验证漏洞
Vulnerability Description
Echo是美国NextApp公司开发的用于建构一种基于Web Ajax应用程式的平台，其接口是经过更新DOM来实现。 Echo 2.1.1之前的版本和3.0.b6之前的3.x版本中的Java XML解析器中存在漏洞。远程攻击者可通过包含外部实体声明与实体引用相结合的请求利用该漏洞读取任意文件，这种攻击方式被称为XML External Entity (XXE)攻击。
CVSS Information
N/A
Vulnerability Type
N/A