CVE-2024-50848

6.5 mediumEPSS 1.3%

Medium (6.5) in rws worldserver. EPSS 1.3% chance of exploitation in the next 30 days.

An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2024-11-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rws:worldserver

References

https://github.com/1mhr4b/CVE-2024-50848
https://github.com/Wh1teSnak3/CVE-2024-50848
https://www.trados.com/product/worldserver/

Check your stack JSON