Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-586v-g7r5-mhgp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system.

When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system.

EPSS

Процентиль: 100%
0.93142
Критический

Связанные уязвимости

CVSS3: 7.5
nvd
больше 5 лет назад

When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system.

CVSS3: 7.5
debian
больше 5 лет назад

When using the StreamGenerator, the code parse a user-provided XML. A ...

EPSS

Процентиль: 100%
0.93142
Критический