This vulnerability (CWE-611) in Apinizer Management Console allows an attacker with low privileges to exploit improper restriction of XML external entity references, potentially causing data serialization external entities blowup. The issue affects versions prior to 2024.05.1. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring low privileges and no user interaction, with high confidentiality impact but no integrity or availability impact. No vendor advisory or patch information is currently available.

Successful exploitation could lead to unauthorized disclosure of sensitive information due to the high confidentiality impact. There is no indication of integrity or availability impact. The vulnerability requires low privileges and can be exploited remotely over the network without user interaction. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Apinizer Management Console to trusted users only and monitor for suspicious XML processing activity. Avoid processing untrusted XML inputs where possible.