CVE-2024-50848

An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive…

Medium · published November 18, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
68.1
In the wild
Unconfirmed
What it is

An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01206 · 68.1th percentile
Published
2024-11-18T00:00Z
EPSS history
Timeline
  • 18 NOV 00:00Z
    An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive…
    cvelistv5