Vulnerabilities > CVE-2021-44556 - XXE vulnerability in KB Digger

047910
CVSS 9.1 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
kb
CWE-611
critical
NVD
Published: 2021-12-08
Updated: 2021-12-13

Summary

National Library of the Netherlands digger < 6697d1269d981e35e11f240725b16401b5ce3db5 is affected by a XML External Entity (XXE) vulnerability. Since XML parsing resolves external entities, a malicious XML stream could leak internal files and/or cause a DoS.

Vulnerable Configurations

Part Description Count
Application
Kb
1

Common Weakness Enumeration (CWE)

References