Bw Webdav

bw-webdav

Vendor: Apereo • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-20000

1Apereo

1Bw Webdav

Nov 21, 2024

Dec 10, 2018

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

Apereo Bedework bw-webdav before 4.0.3 allows XXE attacks, as demonstrated by an invite-reply document that reads a local file, related to webdav/servlet/common/MethodBase.java and webdav/servlet/common/PostRequestPars.j...Show more