CVE-2015-7326

XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...

CVE-2015-7326

CVE-2015-7326 denotes an XML External Entity (XXE) vulnerability in Milton Webdav. Affected in Milton Webdav before 2.7.0.3, with concrete evidence in connected documents showing XXE injection paths via XML parsing in PROPFIND/PROPPATCH/LOCK handling where SAXParser configuration was insecure. Th...