Skip to content
OpenAdvisories
High · 8.3 CVE-2023-6721 EUVD-2023-0296GHSA-gfqh-8v9q-f2vfPYSEC-2023-296

Improper Restriction of XML External Entity Reference in Repox

Published Dec 13, 2023 · Updated Aug 2, 2024 · Assigned by INCIBE

Description

An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application's XML data processing in the fileupload function, resulting in interaction between the attacker and the server's file system.

Affected products

VendorProductAffectedFixed
Repox Repox ≤ 2.3.7 —

References