CVE-2023-24189

2023-02-2400:00:00

mitre

www.cve.org

xml external entity (xxe)

urule v2.1.7

code execution

crafted xml file

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

70.4%

JSON

An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a crafted XML file to /urule/common/saveFile.

References

github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24189.md

github.com/youseries/urule