Lucene search

K
osvGoogleOSV:CVE-2021-39371
HistoryAug 23, 2021 - 1:15 a.m.

CVE-2021-39371

2021-08-2301:15:06
Google
osv.dev
4

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.1%

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.1%