CVE-2021-27931

LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service.

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CVSS v2.0

6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:P

EPSS

18.13% chance of exploitation in the next 30 days, 97th percentile

Nuclei

critical · CWE-611

Published

2021-03-03

Updated

2024-08-03

Proof-of-concept exploits (1)

• sl4cky/LumisXP-XXE---POC/blob/main/poc.txt

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27931.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2018-7600
• CVE-2021-27928
• CVE-2021-27933
• CVE-2021-27913
• CVE-2021-27940
• CVE-2021-27909