CVE-2021-39371: Improper Restriction of XML External Entity Reference

An XML external entity XXE injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected...

PT-2021-22571

Name of the Vulnerable Software and Affected Versions: PyWPS versions prior to 4.5.0 OWSLib version 0.24.1 Description: An XML external entity XXE injection allows an attacker to view files on the application server filesystem by assigning a path to the entity. Recommendations: For PyWPS versions...