Vulnerabilities > CVE-2018-13439 - XXE vulnerability in Tencent Wechat PAY

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
tencent
CWE-611

Summary

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.

Vulnerable Configurations

Part Description Count
Application
Tencent
1