CVE-2023-3113 Information

Description

An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA’s Common Information Model (CIM) server that could result in read-only access to specific files.

Reference

https://support.lenovo.com/us/en/product_security/LEN-98715