An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.
{ "nvd_published_at": "2024-11-05T17:15:07Z", "cwe_ids": [ "CWE-601", "CWE-611" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-11-05T18:56:08Z" }