Vulnerability — CVE-2023-24189

CVE-2023-24189

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-24189
Description:: An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a crafted XML file to /urule/common/saveFile.
Last updated date:: 03/06/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 03/06/2023
Reference url to background: https://github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24189.md