NetSight
medium5.9

CVE-2017-6344

XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.

Impact

XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.

Affected products

VendorProductAffected versions
GrailsPdf Plugin
Version 0.6

Weakness classification

References