CVE-2024-3930CWE-611

XML External Entity in Akana

Medium · published July 30, 2024

CVSS v3.1

6.3

EPSS

0%

Percentile

22.9

In the wild

Unconfirmed

What it is

In versions of Akana API Platform prior to 2024.1.0 a flaw resulting in XML External Entity (XXE) was discovered.

The record

Technical detail

CVSS v3.1: 6.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0: Not supplied
EPSS: 0.00312 · 22.9th percentile
Weakness: CWE-611 · Improper Restriction of XML External Entity Reference
Published: 2024-07-30T18:36Z

EPSS history

Timeline

30 JUL 18:36Z
XML External Entity in Akana
cvelistv5