VULNERABILITY INTELLIGENCE

CVE-2024-45745

CVSS score5 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2024-09-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Description

TopQuadrant TopBraid EDG before version 8.0.1 allows an authenticated attacker to upload an XML DTD file and execute JavaScript to read local files or access URLs (XXE). Fixed in 8.0.1 (bug fix: TBS-6721).

Weakness classification

  • 9119a7d8-5eab-497f-8521-727c672e3725: CWE-611

Primary references