Dell CloudLink Improper Restriction of XML External Entity Reference Vulnerability Leading to Denial-of-Service

A vulnerability allowing improper restriction of XML external entity references has been identified in Dell CloudLink versions 8.0 through 8.1.1. This vulnerability could be exploited by a high-privileged attacker with remote access, potentially leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability could result in a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users can upgrade to Dell CloudLink version 8.1.2 to address this vulnerability. The updated version is available for download from the Dell CloudLink Downloads page.