CVE-2014-8790

Description

XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter.

References

https://github.com/GetSimpleCMS/GetSimpleCMS/issues/944

http://get-simple.info/start/changelog/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS