Tag - CVE-2022-22835

OverIT framework XSLT Injection and XXE – CVE-2022-22834 & CVE-2022-22835

Ylabs2022-07-14T09:41:05+02:00 During a penetration test activity, two vulnerabilities were discovered on a specific functionality called “Test Trasformazione xsl” whose purpose is to test the correct operation of the XSLT Java engine. This functionality is part of the set of tools available within the Geocall-Framework and it is not active by default. Advisory - CVE-2022-22834 OverIT projects based on...