← Back

Urule

urule

Vendor: Bstek • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-24189
1Bstek
1Urule
Mar 12, 2025
Feb 24, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a crafted XML file to /urule/common/saveFile.