CVE-2017-13706
CriticalSummary
An XXE vulnerability in the import package functionality of the deployment module in Lansweeper before version 6.0.100.67 allows remote authenticated users to obtain sensitive information and conduct SSRF attacks.
Risk Assessment
This vulnerability may lead to data exposure, denial of service, and internal port scanning, posing a significant security threat to the organization.
Recommendation
It is recommended to update Lansweeper to version 6.0.100.67 or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows remote authenticated users to obtain sensitive information, cause a denial of service, conduct server-side request forgery (SSRF) attacks, conduct internal port scans, or have unspecified other impact via an XML request, aka bug #572705.