Lucene search
+L
OsgeoPywps

1 matches found

CVE
CVE
added 2021/08/23 12:03 a.m.118 views

CVE-2021-39371

CVE-2021-39371 is an XXE injection in PyWPS prior to 4.4.5, with OWSLib 0.24.1 possibly affected. The vulnerability allows an attacker to view files on the application server filesystem by supplying a path to an XML external entity. The connected advisories indicate remediation by upgrading PyWPS...

7.5CVSS7.3AI score0.01524EPSS
Save