high7.2
CVE-2023-6280
An XXE (XML External Entity) vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11.
Impact
An XXE (XML External Entity) vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. This vulnerability allows the use of external entities in its WebProcessingService servlet for an attacker to retrieve files by making HTTP requests to the internal network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 52north | Wps | before 4.0.0 Version 4.0.0 |