Описание
In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery (SSRF).
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:xerox:freeflow_core:8.0.4:*:*:*:*:*:*:*
EPSS
Процентиль: 20%
0.00064
Низкий
7.5 High
CVSS3
7.5 High
CVSS3
Дефекты
CWE-611
Связанные уязвимости
CVSS3: 7.5
github
около 1 месяца назад
In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery (SSRF).
EPSS
Процентиль: 20%
0.00064
Низкий
7.5 High
CVSS3
7.5 High
CVSS3
Дефекты
CWE-611