An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.
{
"cwe_ids": [
"CWE-601",
"CWE-611"
],
"github_reviewed": true,
"nvd_published_at": "2024-11-05T17:15:07Z",
"github_reviewed_at": "2024-11-05T18:56:08Z",
"severity": "HIGH"
}