Pega Platform Vulnerable to XXE Issue in PDF Generation

CVE-2023-50168

What is CVE-2023-50168?

The Pega Platform, spanning versions from 6.x to 8.8.4, contains a vulnerability related to XML External Entity (XXE) processing, which compromises the integrity and security of PDF Generation functionalities. This flaw can potentially be exploited by malicious actors, allowing them to access sensitive information and execute unauthorized actions within the application. Organizations utilizing these versions should prioritize remediation efforts in accordance with the latest security advisory from Pega Systems.

References