DataSpider Servista XML External Entity Reference Vulnerability Allowing Arbitrary File Read or Denial-of-Service

A vulnerability exists in DataSpider Servista versions through 4.4, related to improper restriction of XML external entity references. This issue can be exploited to read arbitrary files from the file system where the server application is installed, or to cause a denial-of-service condition.

Impact

Exploitation of this vulnerability could lead to unauthorized reading of files on the server's file system or cause a denial-of-service condition.

Remediation

Users are advised to update DataSpider Servista to version 4.5, which addresses this vulnerability.