← Database

CVE-2021-39371

HIGH CVSS: 7.5 Published: 2021-08-23 Modified: 2026-06-17

Description

An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.

Affected Platforms

Debian Debian LinuxOsgeo OwslibOsgeo Pywps

Weakness Type

CWE-611

References