CVE-2023-6721: Europeana Repox

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application's XML data processing in the fileupload function, resulting in interaction between the attacker and the server's file system.

Affected products

• Europeana Repox: version 2.3.7 only

Published 2023-12-13. Last modified 2026-06-17.