CVE-2022-1331

—

CVSS 3.1

5.5 medium

EPSS

<1%p54

Published

May 3, 2022 (May 3, 2022)

Modified

Jun 17, 2026

Description

In four instances DMARS (All versions prior to v2.1.10.24) does not properly restrict references of XML external entities while processing specific project files, which may allow unauthorized information disclosure.

Vendors: deltaww
Products: dmars
Weakness: CWE-611
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.