1 matches found
CVE-2024-55875: Exposure of Sensitive Information to an Unauthorized Actor
http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 6.50.0.0, there is a potential XXE XML External Entity Injection vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read local sensitive information on server,...
9.8CVSS5.9AI score0.01905EPSS
SaveExploits0References4
20