Description
An XML external entity (XXE) injection vulnerability in XML-RPC.NET before 2.5.0 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, as demonstrated by a pingback.aspx POST request.
Unscored
CVE-2022-47514
EUVD-2022-50275GHSA-rvqq-fwff-p2v4
An XML external entity (XXE) injection vulnerability in XML-RPC.NET before 2.5.0 allows remote authenticated users to conduct server-side r…
Published Dec 18, 2022 · Updated Apr 17, 2025 · Assigned by mitre