CVE-2017-1000496

Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code.

Date published : 2018-01-03

https://github.com/commsy/commsy/issues/2