CVE-2021-42776: Cloverdx

High severity, CVSS 7.7. EPSS: 0.8% chance of exploitation in the next 30 days.

CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import.

Affected products

• Cloverdx Cloverdx: before 5.11.2 (fixed in 5.11.2); version 5.12.0 only; version 5.12.1 only

Published 2021-12-01. Last modified 2026-06-17.