Описание
easy-parse XML External Entity Injection vulnerability
easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Пакеты
Наименование
easy-parse
pip
Затронутые версииВерсия исправления
<= 0.1.1
Отсутствует
Связанные уязвимости
CVSS3: 7.5
nvd
больше 2 лет назад
easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.