Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection attack to access arbitrary system files.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-6288-49e01-1.html |
Configurations
No configuration.
Information
Published : 2022-07-20 02:15
Updated : 2022-07-20 11:55
NVD link : CVE-2022-32458
Mitre link : CVE-2022-32458
JSON object : View
Products Affected
No product.
CWE
No CWE.