CoreCVE
Back

HIGH

An XML external entity (XXE) vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request

Published Apr 23, 2019

Description

An XML external entity (XXE) vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-611

XXE

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 23, 2019
Updated Aug 5, 2024
Reserved Sep 18, 2018
Link CVE-2018-17169
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-17169
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-17169