VULNERABILITY INTELLIGENCE

CVE-2021-28684

CVSS score4.3 MEDIUM
EPSS probability0.92%
CISA KEVNot currently listed
Published2021-06-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).

Weakness classification

  • nvd@nist.gov: CWE-611

Primary references