CVE-2024-45745: TopQuadrant TopBraid EDG JavaScript console XXE

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-27 · updated 2026-06-17
Weakness: CWE-611

Description

TopQuadrant TopBraid EDG before version 8.0.1 allows an authenticated attacker to upload an XML DTD file and execute JavaScript to read local files or access URLs (XXE). Fixed in 8.0.1 (bug fix: TBS-6721).

Affected products

TopQuadrant TopBraid EDG: before 8.0.1 — fixed in 8.0.1

How to fix

Upgrade to a fixed version: TopQuadrant TopBraid EDG 8.0.1. Check the vendor advisory for mitigations.

References

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2024/va-24-254-02.json
https://www.topquadrant.com/wp-content/uploads/2024/06/changelog-8.0.1.txt

Get alerted when CVE-2024-45745 or the next vulnerability affects your stack