Description (CNA)
XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://gist.github.com/jonaslejon/5f92779848360a1a1e676af0795bd9aa
- https://kryptera.se/sarbarhet-i-episerver/
ADP enrichment
No English description supplied.