← CVE Intelligence

CVE-2023-6280

XML External Entity Reference on 52North WPS PUBLISHED

Description (CNA)

An XXE (XML External Entity) vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. This vulnerability allows the use of external entities in its WebProcessingService servlet for an attacker to retrieve files by making HTTP requests to the internal network.

Affected (CNA)

Vendor / productVersions
52North / 52North WPSaffected 0 before 4.0.0-beta.11

CWE

CWE-611

References

ADP enrichment

CVE

No English description supplied.