Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-33977

Опубликовано: 26 июл. 2022
Источник: debian
EPSS Низкий

Описание

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
python-untanglefixed1.2.1-1package

Примечания

  • https://github.com/stchris/untangle/releases/tag/1.2.1

  • https://github.com/stchris/untangle/pull/94

EPSS

Процентиль: 84%
0.02125
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 3 лет назад

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running.

CVSS3: 7.5
nvd
больше 3 лет назад

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running.

CVSS3: 7.5
github
больше 3 лет назад

untangle vulnerable to XML Entity Expansion

EPSS

Процентиль: 84%
0.02125
Низкий