Description
An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a crafted XML file to /urule/common/saveFile.
Critical · 9.8
CVE-2023-24189
EUVD-2023-28248GHSA-6jx7-223w-6cf7
An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a crafted XML file to /…
Published Feb 24, 2023 · Updated Mar 12, 2025 · Assigned by mitre