An XML external entity (XXE) injection in PyWPS before 4.5.0 allows an attacker to view files on the application server …
