High severity7.5NVD Advisory· Published Apr 16, 2023· Updated Jun 17, 2026

CVE-2022-38840

Description

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file upload, which leads to local file disclosure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Güralp/MAN-EAM-0003description
Güralp/MAN-EAM-0003llm-fuzzy
Range: =3.2.4

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/171439/MAN-EAM-0003-3.2.4-XML-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
drive.google.com/drive/folders/1UG5IcL8fFp9MV0vjd78_cx6iXKda5bpMnvdExploit

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.008
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000