Lucene search

K
osvGoogleOSV:GHSA-P9WF-3XPG-C9G5
HistorySep 02, 2021 - 5:11 p.m.

XML External Entity Injection in PyWPS

2021-09-0217:11:13
Google
osv.dev
5

0.002 Low

EPSS

Percentile

54.1%

An XML external entity (XXE) injection in PyWPS before 4.5.0 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Rows per page:
1-10 of 241

0.002 Low

EPSS

Percentile

54.1%