CVE-2023-37200CWE-611

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on…

Medium · published July 12, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that

could cause loss of confidentiality when replacing a project file on the local filesystem and after

manual restart of the server.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2023-07-12T07:11Z
EPSS history
Timeline
  • 12 JUL 07:11Z
    A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on…
    cvelistv5