Опубликовано: 02 мая 2024
Источник: github
Github: Прошло ревью
CVSS4: 9.3
CVSS3: 8.1
Описание
libxmljs vulnerable to type confusion when parsing specially crafted XML
libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution.
Пакеты
Наименование
libxmljs
npm
Затронутые версииВерсия исправления
<= 1.0.11
Отсутствует
Связанные уязвимости
CVSS3: 8.1
nvd
почти 2 года назад
libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution.