Lucene search

PRIOn knowledge basePRION:CVE-2022-4607

HistoryDec 18, 2022 - 10:15 p.m.

Xxe

2022-12-1822:15:00

PRIOn knowledge base

www.prio-n.com

3d city database

ogc web feature service

version 5.2.0

xml external entity reference

upgrade

patch 246f4e2a97ad81491c00a7ed72ce5e7c7f75050a

vdb-216215

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.1%

JSON

A vulnerability was found in 3D City Database OGC Web Feature Service up to 5.2.0. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to xml external entity reference. Upgrading to version 5.2.1 is able to address this issue. The name of the patch is 246f4e2a97ad81491c00a7ed72ce5e7c7f75050a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216215.

CPENameOperatorVersion
ogc_web_feature_servicelt5.2.1

CPE	Name	Operator	Version
	ogc_web_feature_service	lt	5.2.1

References

github.com/3dcitydb/web-feature-service/commit/246f4e2a97ad81491c00a7ed72ce5e7c7f75050a

github.com/3dcitydb/web-feature-service/pull/12

github.com/3dcitydb/web-feature-service/releases/tag/v5.2.1

vuldb.com/?id.216215