Description (CNA)
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Dogtag PKI | affected Affected versions: 10.5.18, 10.7.4, 10.8.3, 10.11.2, 10.12.4, 11.0.5, 11.1.0 |
CWE
CWE-611
References
ADP enrichment
No English description supplied.