Urule vulnerabilities
1 known vulnerability in Urule from Bstek. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Urule: Improper Restriction of XML External Entity Reference
An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a crafted XML file to /urule/common/saveFile.