Headline
CVE-2023-28828
A vulnerability has been identified in Polarion ALM (All versions < V2304.0). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attacker to view files on the application server filesystem.
%PDF-1.5 %���� 51 0 obj << /Length 2434 /Filter /FlateDecode >> stream x��Z�r�8}�W𑪊`\^2�[�8άg�$cɉ��y@$H�5$e{��%R�U�(���[$H4N_�}�� �~:y5<9}#���$�7�x%qzQ��"o8�>��T�����y�=Z�>�~Z�a����i�à����������E>^��� �=��:���bx�� @�c�D�y��ɧ_�7�g?{��$� ̛s/���@�u� N~9�N���%ՋdHh��Ɍ�D�Z����� IEMɄ�0v��C�Y��U�II?dqI�B뵛�?,>H�4nۃ���0��x�t�P�.z��" ဵ"d������ ��pp� ��%�F| ���`�/#"��(�!#�<(v`1Ts x&[�s��M��4_��h9z~�9 �� ����(,�C/��*[�B}I�N?�2d��Є"9D�$��}z��0J�z� 8� 倀C"c����~fwc��^@��\�i�g �pf ��+UVv��rlgɈ��fI;�|Uz�&~����E ���������a0���a��*�+���@Q(}IDguD[��H��������D���F% CpN��Jv{}}vӓ��.�eЉ��: �D�b�s��F�����.\�Hi�M��1�+�:m�W�}~w}eL]�K�cq�C6כ�>SI��.���ֹ�