| |
Vulnerability CVE-2022-32458
Published: 2022-07-20
| Description: |
Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection attack to access arbitrary system files. |
References: |
https://www.twcert.org.tw/tw/cp-132-6288-49e01-1.html
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
