Описание
The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources.
Ссылки
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:journyx:journyx:11.5.4:*:*:*:*:linux:*:*
EPSS
Процентиль: 100%
0.92287
Критический
7.5 High
CVSS3
Дефекты
CWE-611
CWE-611
Связанные уязвимости
CVSS3: 7.5
github
больше 1 года назад
The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources.
EPSS
Процентиль: 100%
0.92287
Критический
7.5 High
CVSS3
Дефекты
CWE-611
CWE-611