| Package | Affected versions | Patched versions |
|---|---|---|
| freeflow core | = 8.0.4 |
In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery (SSRF).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free