CVE-2017-6344

XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.

Score

CVSS 3.0 5.9 Medium

Status

Modified - cve@mitre.org

Published

2017-02-27

Last modified

2024-08-05

Weaknesses

CWE-611

Affected products

• Pdf Plugin (Grails)

References

• http://www.securityfocus.com/bid/96446
• https://www.ambionics.io/blog/grails-pdf-plugin-xxe