CVE-2023-6721CWE-611

Improper Restriction of XML External Entity Reference in Repox

High · published December 13, 2023

CVSS v3.1
8.3
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application's XML data processing in the fileupload function, resulting in interaction between the attacker and the server's file system.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00603 · 48.2th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2023-12-13T10:06Z
EPSS history
Timeline
  • 13 DEC 10:06Z
    Improper Restriction of XML External Entity Reference in Repox
    cvelistv5