Security Advisory

CVE-2019-10264

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-07-26 20:46:24
Last updated 2024-08-04 22:17:19
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. With a valid administrator account, the "Move / Import / Export Users" screen has an Import Users option. This option accepts a ZIP archive containing a users.xml file that can trigger XXE.