Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-2021-37425.
The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mobiletogether_server | Altova | 7.0 (including) | 7.3 (excluding) |
| Mobiletogether_server | Altova | 7.3 (including) | 7.3 (including) |