CVE-2021-39371
An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.
CVSS 3.1 · 7.5 High
EPSS 1.5%
KEV · Not listed
Vendors
Products