CVE-2022-4607

Medium

Description

A vulnerability was found in 3D City Database OGC Web Feature Service up to 5.2.0. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to xml external entity reference. Upgrading to version 5.2.1 is able to address this issue. The name of the patch is 246f4e2a97ad81491c00a7ed72ce5e7c7f75050a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216215.

SeverityMedium

CVSS5.5

Exploit probability—

ProductTum Ogc Web Feature Service

PublishedDec 18, 2022

First seenDec 18, 2022

Weakness typeCWE-611XML external entity (XXE)

How to fix

Update

tum ogc_web_feature_service5.2.1 or later

Patches

github.com/3dcitydb/web-feature-service/commit/246f4e2a97ad81491c00a7ed72ce5e7c7f75050a

Vendor advisories

github.com/3dcitydb/web-feature-service/releases/tag/v5.2.1

Affected products

Product	Affected versions	Fixed in
tum ogc_web_feature_service	v < 5.2.1	5.2.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.