High severity7.5NVD Advisory· Published Aug 29, 2018· Updated Jun 17, 2026

CVE-2017-17762

Description

XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nuget/Episerver.cmsinferred
Range: <=7.0.0.4
Package: https://nuget.org/packages/EPiServer.CMS
Episerver/CMSllm-create
Range: <=7 patch 4

Patches

Vulnerability mechanics

References

gist.github.com/jonaslejon/5f92779848360a1a1e676af0795bd9aanvdExploitThird Party Advisory
kryptera.se/sarbarhet-i-episerver/nvdExploitMitigationThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000