CVEvulnerability
CVE-2021-28684
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-06-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-611
Description
The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).
Affected configurations
• powerarchiver powerarchiver (< 20.10.02)
Related
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness
References
- https://peterka.tech/blog/posts/cve-2021-28684/ Exploit, Third Party Advisory
- https://www.powerarchiver.com Product
- https://peterka.tech/blog/posts/cve-2021-28684/ Exploit, Third Party Advisory
- https://www.powerarchiver.com Product