CVE-2010-2245

CVE-2010-2245

EPSS 11.6%

XML External Entity (XXE) vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=wink-user&m=127843482925387&w=2 https://svn.apache.org/repos/asf/wink/trunk/security/CVE-2010-2245.pdf