CVE-2024-12476CWE-611

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts workstation integrity and…

High · published January 17, 2025

CVSS v4.0
8.4
EPSS
0%
Percentile
19.1
In the wild
Unconfirmed
What it is

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could

cause information disclosure, impacts workstation integrity and potential remote code execution on the

compromised computer, when specific crafted XML file is imported in the Web Designer configuration tool.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00278 · 19.1th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2025-01-17T09:42Z
EPSS history
Timeline
  • 17 JAN 09:42Z
    CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts workstation integrity and…
    cvelistv5