1 matches found
CVE-2023-38693: Improper Restriction of XML External Entity Reference
Lucee Server or simply Lucee is a dynamic, Java based, tag and scripting language used for rapid web application development. The Lucee REST endpoint is vulnerable to RCE via an XML XXE attack. This vulnerability is fixed in Lucee 5.4.3.2, 5.3.12.1, 5.3.7.59, 5.3.8.236, and 5.3.9.173...
9.8CVSS5.8AI score0.00807EPSS
SaveExploits0References1
20