Threats Tagged 'ghsa-xppm-xgg9-r2gq'

Progress Software Corporation MarkLogic Server versions 11.0.0 up to but not including 11.3.7 have an XML External Entity (XXE) vulnerability due to improper restriction of XML external entity references in the SAML parser configuration. This flaw allows processing of external DTDs or entities, potentially leading to unintended network access or information disclosure. The vulnerability has a high severity with a CVSS score of 7.5. No known exploits are reported in the wild. The issue is fixed starting from version 11.3.7.