| Package | Affected versions | Patched versions |
|---|---|---|
| sugarcrm | < 6.5.16 | 6.5.16 |
XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free