| Package | Affected versions | Patched versions |
|---|---|---|
| journyx | = 11.5.4 |
The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free