Lucene search
HistoryDec 13, 2023 - 10:15 a.m.
CVE-2023-6721
xee
repox
fileupload
remote attacker
xml data processing
server's file system
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
32.8%
An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application’s XML data processing in the fileupload function, resulting in interaction between the attacker and the server’s file system.
Affected configurations
Node
europeanarepoxMatch2.3.7
Related
prion
prion
Design/Logic Flaw
2023-12-13 10:15:00
cve
cve
CVE-2023-6721
2023-12-13 10:15:11
cvelist
cvelist
CVE-2023-6721 Improper Restriction of XML External Entity Reference in Repox
2023-12-13 10:06:55
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
32.8%
Related for NVD:CVE-2023-6721