Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2023-6721

Improper Restriction of XML External Entity Reference in Repox

Description

An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application's XML data processing in the fileupload function, resulting in interaction between the attacker and the server's file system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Repox Repox

Default version status: unaffected

  • 0 to ≤ 2.3.7affected

References