Vulners
Lucene search
3 matches found
XML External Entity Injection in PyWPS
An XML external entity XXE injection in PyWPS before 4.5.0 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected...
7.5CVSS7.4AI score0.00528EPSS
Exploits0References7Affected Software1
GHSA-P9WF-3XPG-C9G5 XML External Entity Injection in PyWPS
An XML external entity XXE injection in PyWPS before 4.5.0 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected...
8.7CVSS7.4AI score0.00528EPSS
Exploits0References8
PYSEC-2021-121
An XML external entity XXE injection in PyWPS before 4.5.0 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected...
7.5CVSS7.3AI score0.00528EPSS
Exploits0References3Affected Software1
20