Описание
python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document.
Ссылки
- Mailing ListPatchThird Party Advisory
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- PatchRelease NotesVendor Advisory
- Mailing ListPatchThird Party Advisory
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- PatchRelease NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.8.5 (включая)
cpe:2.3:a:python-openxml_project:python-docx:*:*:*:*:*:*:*:*
EPSS
Процентиль: 75%
0.00899
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-611
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
Improper Restriction of XML External Entity Reference in python-docx
EPSS
Процентиль: 75%
0.00899
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-611