An issue exists in CALDERA 2.9.0. The Debrief plugin receives base64 encoded "SVG" parameters when generating a PDF document. These SVG documents are parsed in an unsafe manner and can be leveraged for XXE attacks (e.g., File Exfiltration, Server Side Request Forgery, Out of Band Exfiltration, etc.).
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mitre caldera 2.9.0 |
Vulmon