CVEs-PoC/2020/CVE-2020-11991.md

CVE-2020-11991

Description

When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system.

POC

Reference

No PoCs from references.

Github

• https://github.com/0day404/vulnerability-poc
• https://github.com/20142995/Goby
• https://github.com/20142995/nuclei-templates
• https://github.com/404notf0und/CVE-Flow
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/ArrestX/--POC
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/H4ckTh3W0r1d/Goby_POC
• https://github.com/HimmelAward/Goby_POC
• https://github.com/J1ezds/Vulnerability-Wiki-page
• https://github.com/KayCHENvip/vulnerability-poc
• https://github.com/Miraitowa70/POC-Notes
• https://github.com/NyxAzrael/Goby_POC
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Threekiii/Awesome-POC
• https://github.com/XiaomingX/awesome-poc-for-red-team
• https://github.com/Z0fhack/Goby_POC
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/pen4uin/awesome-vulnerability-research
• https://github.com/pen4uin/vulnerability-research
• https://github.com/pen4uin/vulnerability-research-list
• https://github.com/ranhn/Goby-Poc