Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39478
HistoryMar 01, 2023 - 11:32 a.m.

XML External Entity (XXE)

2023-03-0111:32:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
xml external entity
urule
remote attacker
arbitrary code
crafted xml file
savefile
software

EPSS

0.003

Percentile

70.4%

urule is vulnerable to XML External Entities (XXE). A remote attacker is able to execute arbitrary code by uploading a crafted XML file to /urule/common/saveFile.

EPSS

0.003

Percentile

70.4%

Related for VERACODE:39478