Charlesproxy: >> Charles >> 4.2.7 Security Vulnerabilities
An XML External Entity (XXE) vulnerability exists in the Charles 4.2.7 import/export setup option. If a user imports a "Charles Settings.xml" file from an attacker, an intranet network may be accessed and information may be leaked.
CVSS Score
8.6
EPSS Score
0.003
Published
2018-11-13