Osgeo Pywps vulnerabilities

1 vulnerability

Known vulnerabilities in Osgeo Pywps, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2021-39371debianpywps+5
EPSS score
1.52%
An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.