← Database

CVE-2023-24189

CRITICAL CVSS: 9.8 Published: 2023-02-24 Modified: 2026-06-17

Description

An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a crafted XML file to /urule/common/saveFile.

Affected Platforms

Bstek Urule

Weakness Type

CWE-611, CWE-611

References