CVE-2015-8549

Опубликовано: 15 янв. 2020

Источник: nvd

CVSS3: 7.1

CVSS2: 5.8

EPSS Низкий

Описание

XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files via a crafted Action Message Format (AMF) payload.

Ссылки

http://www.ocert.org/advisories/ocert-2015-011.html
Third Party Advisory
http://www.securityfocus.com/archive/1/archive/1/537151/100/0/threaded
Broken Link
https://github.com/hydralabs/pyamf/pull/58
Patch
Third Party Advisory
https://github.com/hydralabs/pyamf/releases/tag/v0.8.0
Release Notes
http://www.ocert.org/advisories/ocert-2015-011.html
Third Party Advisory
http://www.securityfocus.com/archive/1/archive/1/537151/100/0/threaded
Broken Link
https://github.com/hydralabs/pyamf/pull/58
Patch
Third Party Advisory
https://github.com/hydralabs/pyamf/releases/tag/v0.8.0
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pyamf:pyamf:*:*:*:*:*:*:*:*

Версия до 0.8.0 (исключая)

EPSS

Процентиль: 77%

0.0177

Низкий

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

CVE-2015-8549

CVSS3: 7.1

debian

больше 6 лет назад

XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows r ...

GHSA-m7m4-4vm8-55wg

CVSS3: 7.1

github

больше 4 лет назад

PyAMF vulnerable to XML external entity (XXE)

EPSS

Процентиль: 77%

0.0177

Низкий

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-611