CVE-2017-15280

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

XML external entity (XXE) vulnerability in Umbraco CMS before 7.7.3 allows attackers to obtain sensitive information by reading files on the server or sending TCP requests to intranet hosts (aka SSRF), related to Umbraco.Web/umbraco.presentation/umbraco/dialogs/importDocumenttype.aspx.cs.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-611

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://issues.umbraco.org/issue/U4-10506Issue Tracking, Patch, Vendor Advisory
https://github.com/umbraco/Umbraco-CMS/commit/5dde2efe0d2b3a47d17439e03acabb7ea2befb64Patch, Third Party Advisory
http://issues.umbraco.org/issue/U4-10506Issue Tracking, Patch, Vendor Advisory
https://github.com/umbraco/Umbraco-CMS/commit/5dde2efe0d2b3a47d17439e03acabb7ea2befb64Patch, Third Party Advisory

Timeline

Published: Oct 12, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-152818.8ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly hav CVE-2017-152845.4Cross-Site Scripting exists in OctoberCMS 1.0.425 (aka Build 425), allowing a least privileged user to upload an SVG file containing malicio CVE-2017-152858.8X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution. This vulnerability exists because the application fails CVE-2017-152867.5SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pS CVE-2017-152876.1There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the CVE-2017-152887.8The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in /t CVE-2017-152896.0The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-CVE-2017-152907.5Mirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1 has a login process in which cleartext data CVE-2017-152916.1Cross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows remote attackers to CVE-2017-152939.8Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or c CVE-2017-152946.1The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964.CVE-2017-152959.8Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064.