XML External Entity (XXE)

ploneappdexterity is vulnerable to XML External Entity XXE. An attacker with manager role is able to submit requests on behalf of the server and gain access to internal resources. The vulnerability exist when XML input containing a reference to an external entity is processed by a weakly configur...