CVSS
7.7
CVSS v3.1
EPSS
N/A
Exploit Prediction Score
Published
August 14, 2026
Exploitability
No EPSS data available
Datavane TIS v5.0.0 contains an XML external entity (XXE) injection vulnerability that allows authenticated attackers to perform server-side request forgery and out-of-band file exfiltration by supplying a crafted taskScript payload to the doEditWorkflow endpoint, which processes XML through an unhardened DocumentBuilderFactory with external entities and DTD loading enabled. Attackers can send a malicious XML document containing an external DTD reference to the edit_workflow action, causing the server to issue outbound HTTP requests to attacker-controlled infrastructure and exfiltrate local files readable by the TIS process user, including configuration files and Derby database credentials.
No package data available.
Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).