Dieulink

SolarWinds Web Help Desk is susceptible to an XML External Entity (XXE) injection issue that may result in information disclosure. Successful exploitation requires valid, low-privilege access, or access to the local server to modify configuration files.

The issue is related to insufficient input validation in Microsoft SharePoint Server and its variants. This can be exploited by a remote attacker using specially crafted data to execute arbitrary code.