๐ CVE-2022-32458
๐ก Newskategorie: Sicherheitslรผcken
๐ Quelle: web.nvd.nist.gov
Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection attack to access arbitrary system files. ...