CVE-2023-2806CWE-611

Weaver e-cology API RequestInfoByXml xml external entity reference

Medium · published May 19, 2023

CVSS v3.1
5.5
EPSS
1%
Percentile
62.0
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00984 · 62.0th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2023-05-19T08:31Z
EPSS history
Timeline
  • 19 MAY 08:31Z
    Weaver e-cology API RequestInfoByXml xml external entity reference
    cvelistv5