| Package | Affected versions | Patched versions |
|---|---|---|
| cbrn-analysis | < 22 | 22 |
CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free