CVE-2024-8010
Severity CVSS v4.0:
Pending analysis
Type:
CWE-611
Improper Restriction of XML External Entity Reference ('XXE')
Publication date:
16/04/2026
Last modified:
17/04/2026
Description
The component accepts XML input through the publisher without disabling external entity resolution. This allows malicious actors to submit a crafted XML payload that exploits the unescaped external entity references.<br />
<br />
By leveraging this vulnerability, a malicious actor can read confidential files from the product&#39;s file system or access limited HTTP resources reachable via HTTP GET requests to the vulnerable product.
Impact
Base Score 3.x
3.50
Severity 3.x
LOW