Launchpad.net

CVE 2020-24379

WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.

See the CVE page on Mitre.org for more details.