CVE-2023-49110

The Kiuwan SAST web application (on-premises, cloud, or SaaS) is vulnerable to an XML external entity (XXE) injection attack. The flaw exists because the server-side processing of XML files within a ZIP archive uploaded by the Kiuwan Local Analyzer resolves external entities. An attacker with pri...