Obdasystems Mastro
2 CVEs affecting Obdasystems Mastro. Latest disclosed: 2022-06-21. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-40511 | High | 7.5 | 2022-06-21 | OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion (aka “billion laughs”) attack allowing denial of service. |
CVE-2021-40510 | High | 7.5 | 2022-06-21 | XML eXternal Entity (XXE) in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs. |