CVE-2021-21517 | BDVDB-2026-149798 Detail

Description#

SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a non-root user and may be able to temporarily disrupt the ESRS service.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-03-01Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.