CVE-2020-14478 — IMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-611
A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit coul…
Published: 2022-02-24 · CVSS: 7.1 · CVSS 3.1
A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a denial-of-service condition and allow the attacker to arbitrarily read any local file via system-level services.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7