{"id":"CVE-2017-1000496","details":"Commsy version 9.0.0 is vulnerable to XXE attacks in the configuration import functionality resulting in denial of service and possibly remote execution of code.","modified":"2026-04-10T03:56:04.718681Z","published":"2018-01-03T14:29:00.283Z","references":[{"type":"REPORT","url":"https://github.com/commsy/commsy/issues/2"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/commsy/commsy","events":[{"introduced":"0"},{"last_affected":"19f682455b696196e499c3aa3a9f08fcce35278e"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"9.0.0"}]}}],"versions":["8.0.1","8.0.1.1","8.0.2","8.0.6","9.0.0","REL-6-3-1-before-mediabird-update","Rel-6-0-2-1","Rel-6-0-2-2","Rel-6-0-3","Rel-6-0-4","Rel-6-1-0","Rel-6-1-1","Rel-6-1-1-1","Rel-6-1-2","Rel-6-1-3","Rel-6-1-3-1","Rel-6-1-3-2","Rel-6-2-0","Rel-6-2-0-1","Rel-6-2-0-2","Rel-6-2-0-3","Rel-6-2-0-4","Rel-6-2-1","Rel-6-2-1-1","Rel-6-2-1-2","Rel-6-2-2","Rel-6-2-2-1","Rel-6-2-2-2","Rel-6-2-2-3","Rel-6-2-3","Rel-6-2-3-1","Rel-6-2-4","Rel-6-2-4-1","Rel-6-2-4-2","Rel-6-2-4-3","Rel-6-2-4-4","Rel-6-2-4-5","Rel-6-2-4-6","Rel-6-2-4-7","Rel-6-3-0","Rel-6-3-0-1","Rel-6-3-0-2","Rel-6-3-0-3","Rel-6-3-0-4","Rel-6-3-0-5","Rel-6-3-1","Rel-6-3-1-1","Rel-6-3-1-2","Rel-6-3-1-3","Rel-6-3-2","Rel-6-3-2-1","Rel-6-3-2-2","Rel-6-3-2-3","Rel-6-3-2-4","Rel-6-3-3","Rel-6-3-3-1","Rel-6-3-3-2","Rel-6-3-3-3","Rel-6-5-0","Rel-6-5-1","Rel-6-5-1-1","Rel-6-5-1-2","Rel-6-5-1-3","Rel-6-5-1-4","Rel-6-5-1-5","Rel-6-5-1-6","Rel-6-5-1-7","Rel-7-0-0-1","Rel-7-0-0-2","Rel-7-0-1","Rel-7-0-1-1","Rel-7-0-2","Rel-7-0-2-1","Rel-7-0-3","Rel-7-0-3-1","Rel-7-0-3-2","Rel-7-0-3-3","Rel-7-0-4","Rel-7-1-0","Rel-7-1-0-1","Rel-7-1-0-2","Rel-7-1-1","Rel-7-1-1-1","Rel-7-1-2","Rel-7-1-2-1","Rel-7-1-2-2","Rel-7-2-0","Rel-7-2-1","Rel-7-2-1-1","Rel-7-2-1-2","Rel-7-2-1-3","Rel-7-2-2","Rel-7-2-3","Rel-7-2-4","Rel-7-3-0","Rel-7-3-0-1","Rel-7-3-0-2","Rel-7-5-0","Rel-7-5-0-1","Rel-7-5-1","Rel-7-5-1-2","Rel-7-5-2","Rel-7-5-2-1","Rel-7-5-2-2","Rel-7-5-2-3","Rel-7-5-4","Rel-7-5-4-2","Rel-8-0-0","Rel-8-0-0-RC-2","Rel-8-0-0-RC-3","Rel-UTF-8","Root_bugfix_branch_7-5-5","Root_search_development","Root_security_development","v9.0.0-beta.1","v9.0.0-rc.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000496.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}