| Package | Affected versions | Patched versions |
|---|---|---|
| ignition | ≥ 7.9.0, < 7.9.21≥ 8.1.0, < 8.1.8 | 7.9.218.1.8 |
Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack while restoring the backup.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free