Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PyWPS 代码问题漏洞
Vulnerability Description
PyWPS是开放地理空间联盟（OGC）标准组织的Web 处理服务标准的实现。PyWPS 是用 Python 编写的。 PyWPS 4.5.0之前版本存在代码问题漏洞，该漏洞源于软件中的的XML外部实体(XXE)注入。允许攻击者可利用该漏洞通过为实体分配路径来查看应用程序服务器文件系统上的文件。OWSLib 0.24.1也可能受到影响。
CVSS Information
N/A
Vulnerability Type
N/A