OsgeoPywps
1 matches found
CVE-2021-39371
CVE-2021-39371 is an XXE injection in PyWPS prior to 4.4.5, with OWSLib 0.24.1 possibly affected. The vulnerability allows an attacker to view files on the application server filesystem by supplying a path to an XML external entity. The connected advisories indicate remediation by upgrading PyWPS...
7.5CVSS7.3AI score0.01524EPSS
Save