Ektron Content Management System (CMS) 8.5 and 8.7 before... · CVE-2015-0931 · GitHub Advisory Database · GitHub

Ektron Content Management System (CMS) 8.5 and 8.7 before...

Moderate severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Jan 28, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to execute arbitrary code via a crafted XSLT document, related to a "resource injection" issue.

References

Published by the National Vulnerability Database

Feb 14, 2015

Published to the GitHub Advisory Database May 17, 2022

Last updated Jan 28, 2023