CVE-2019-14276

WUSTL XNAT 1.7.5.3 allows XXE attacks via a POST request body...

CVE-2019-14276

The CVE-2019-14276 issue affects WUSTL XNAT 1.7.5.3, where XXE attacks are possible via the POST request body. Connected sources confirm the vulnerability is tied to XXE in XNAT 1.7.5.3 and recommend updating to a newer version that contains a fix. The NVD has documented scores (CVSS v2 and v3.1)...