CVE-2022-1331

MEDIUM

DMARS < 2.1.10.24 - XML External Entity Injection in Project File Processing

Title source: llm

Description

In four instances DMARS (All versions prior to v2.1.10.24) does not properly restrict references of XML external entities while processing specific project files, which may allow unauthorized information disclosure.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-01

Scores

CVSS v3 5.5

EPSS 0.0013

EPSS Percentile 31.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-611

Status published

Products (1)

deltaww/dmars < 2.1.10.24

Published May 03, 2022

Tracked Since Feb 18, 2026