CVE-2022-32458 — Data Systems Consulting Co., Ltd. BPM - XML External Entity (XXE) Injection
Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection a…
Published: 2022-07-20 · CVSS: 7.5 · CVSS 3.1
Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection attack to access arbitrary system files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7