CVE-2024-45745

4.3 mediumEPSS 0.3%

Medium (4.3) in topquadrant topbraid edg. EPSS 0.3% chance of exploitation in the next 30 days.

TopQuadrant TopBraid EDG before version 8.0.1 allows an authenticated attacker to upload an XML DTD file and execute JavaScript to read local files or access URLs (XXE). Fixed in 8.0.1 (bug fix: TBS-6721).

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2024-09-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

topquadrant:topbraid_edg

References

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2024/va-24-254-02.json
https://www.topquadrant.com/wp-content/uploads/2024/06/changelog-8.0.1.txt

Check your stack JSON