high7.5
CVE-2017-17762
XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request …
Impact
XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Episerver | Episerver | through 7 Version 7 |