ROS-20230418-04

A vulnerability in the pki-core public key infrastructure deployment management system is related to
insufficient validation of user-entered XML data, which could be passed by specially
created XML code to a vulnerable application and view the contents of arbitrary files on the system or
initiate requests to external systems. Exploitation of the vulnerability could allow an attacker,
acting remotely, to view the contents of an arbitrary file on a server or to perform a network scan of internal and external infrastructure.
network scanning of internal and external infrastructure.