CVE-2021-28684

4.3 mediumEPSS 0.9%

Medium (4.3) in powerarchiver powerarchiver. EPSS 0.9% chance of exploitation in the next 30 days.

The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2021-06-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

powerarchiver:powerarchiver

References

https://peterka.tech/blog/posts/cve-2021-28684/
https://www.powerarchiver.com
https://peterka.tech/blog/posts/cve-2021-28684/
https://www.powerarchiver.com

Check your stack JSON