| Package | Affected versions | Patched versions |
|---|---|---|
| cloud backup suite | < 8.1.1.50 | 8.1.1.50 |
An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. With a valid administrator account, the "Move / Import / Export Users" screen has an Import Users option. This option accepts a ZIP archive containing a users.xml file that can trigger XXE.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free