Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.4%	CVE-2026-54668kitodo-production · Improper Restriction of XML External Entity Reference High8.7EPSS 0.4%2026-10-23CVE Database V5CVE-2026-54668 Kitodo.Production versions prior to 3.9.2 contain an XML External Entity (XXE) vulnerability due to insecure XML parser configurations that allow processing of external entities. Authenticated users uploading crafted EAD/XML files can exploit this to perform local file disclosure and server-side request forgery (SSRF). The issue is fixed in version 3.9.2. EPSS 0.4%Vulnerability kitodo #cwe-611	CVE Database V5	2026-10-23

Showing 1–1 of 1 result