Mmastodon TechnologyCybersecurity first seen 9 h ago, last 9 h ago, peak #1

Critical XXE Vulnerability Found in Sparx Enterprise Architect

Original: (cert.pl) Critical XXE Vulnerability in Sparx Systems Enterprise Architect Enables Arbitrary File Read In brief - This a

Poland's cybersecurity agency CERT.pl has disclosed a critical vulnerability in Sparx Systems Enterprise Architect, a modeling software widely used by enterprises and government bodies. The flaw, an XML External Entity (XXE) issue, lets attackers read arbitrary files on affected systems. Security professionals are warning users to patch and reviewing where the tool is deployed.

Why now: Newly disclosed critical vulnerability in widely used enterprise software raises urgent patching concerns.

Sparx SystemsEnterprise ArchitectCERT.pl

Open on mastodon →

Evidence

• (cert.pl) Critical XXE Vulnerability in Sparx Systems Enterprise Architect Enables Arbitrary File Read In brief - This article describes a vulnerability in Sparx Systems Enterprise Architect software that allows for arbitrary file disclosure via XML External Entity (XXE)… · orlysec@swecyb.com · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/2362707