What’s Vulnerable › Vulnerabilities

CVE-2017-17762

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-08-29 · updated 2026-06-17
• Weakness: CWE-611

Description

XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx.

Affected products

• Episerver: through 7; 7, 7-patch_1, 7-patch_2, 7-patch_3, 7-patch_4

References

• https://gist.github.com/jonaslejon/5f92779848360a1a1e676af0795bd9aa
• https://kryptera.se/sarbarhet-i-episerver/
• https://gist.github.com/jonaslejon/5f92779848360a1a1e676af0795bd9aa
• https://kryptera.se/sarbarhet-i-episerver/

Get alerted when CVE-2017-17762 or the next vulnerability affects your stack