Szafir Weryfikująca vulnerabilities
1 known vulnerability in Szafir Weryfikująca from Krajowa Izba Rozliczeniowa. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest first
- 8.2 High severity
Szafir: Improper Restriction of XML External Entity Reference
Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a crafted XML file containing a `DOCTYPE` with an external DTD reference, the parser processes external entities, allowing an attacker to read arb