CVE-2022-2414 PoC — Dogtag PKI 代码问题漏洞

Description

A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

介绍

# CVE-2022-2414-Proof-Of-Concept
A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

References: 

https://nvd.nist.gov/vuln/detail/CVE-2022-2414

https://access.redhat.com/security/cve/CVE-2022-2414

文件快照

备注