CVE-2022-2414

Name of the Vulnerable Software and Affected Versions pki-core versions (affected versions not specified)

Description The issue is related to the incorrect restriction of XML external entities, which can lead to XML external entity (XXE) attacks. A remote attacker can potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. The vulnerability is associated with insufficient validation of user-input XML data, allowing an attacker to view the contents of arbitrary files on the server or initiate requests to external systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.