Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3243

Опубликовано: 12 мая 2014
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted SOAP request containing a large number of nested entity references.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:makina-corpus:soappy:0.12.5:*:*:*:*:*:*:*

EPSS

Процентиль: 73%
0.00755
Низкий

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 11 лет назад

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted SOAP request containing a large number of nested entity references.

redhat
почти 12 лет назад

SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted SOAP request containing a large number of nested entity references.

debian
больше 11 лет назад

SOAPpy 0.12.5 does not properly detect recursion during entity expansi ...

github
больше 3 лет назад

SOAPpy vulnerable to XXE attacks

EPSS

Процентиль: 73%
0.00755
Низкий

5 Medium

CVSS2

Дефекты

CWE-119