cve/2021/CVE-2021-39371.md
2024-05-25 21:48:12 +02:00

652 B

CVE-2021-39371

Description

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

POC

Reference

No PoCs from references.

Github