CVE-2016-4312

XML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to XACML features to read arbitrary files, cause a denial of service, conduct server-side request forgery (SSRF) attacks, or have unspecified other impact via a crafted XACML request to entitlement/eval-policy-submit.jsp. NOTE: this issue can be combined with CVE-2016-4311 to exploit the vulnerability without credentials.

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P

EPSS

6.00% chance of exploitation in the next 30 days, 93th percentile

Published

2017-02-16

Updated

2024-08-06

Proof-of-concept exploits (2)

• http://hyp3rlinx.altervista.org/advisories/WSO2-IDENTITY-SERVER-v5.1.0-XML-External-Entit…
• http://packetstormsecurity.com/files/138329/WSO2-Identity-Server-5.1.0-XML-Injection.html

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/40239

References

• CVE Record
• NVD entry

Related

• CVE-2016-4311
• CVE-2016-4313
• CVE-2016-4309
• CVE-2016-4314
• CVE-2016-4307
• CVE-2016-4315