CVE-2023-6280 — XML External Entity Reference on 52North WPS
An XXE (XML External Entity) vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. This vulnerability allows the use of external entities in …
Published: 2023-12-19 · CVSS: 7.2 · CVSS 3.1
An XXE (XML External Entity) vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. This vulnerability allows the use of external entities in its WebProcessingService servlet for an attacker to retrieve files by making HTTP requests to the internal network.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7