medium6.8
CVE-2023-1288
An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server.
Impact
An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 3ds | Enovia Live Collaboration | from v6r2013xe before v6r2013xe_fp.cfa.2240 |