CVE-2021-39371

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the…

published August 23, 2021

CVSS
—
EPSS
2%
Percentile
74.4
In the wild
Unconfirmed
What it is

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01524 · 74.4th percentile
Published
2021-08-23T00:03Z
EPSS history
Timeline
  • 23 AUG 00:03Z
    An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the…
    cvelistv5