Описание
National Library of the Netherlands digger < 6697d1269d981e35e11f240725b16401b5ce3db5 is affected by a XML External Entity (XXE) vulnerability. Since XML parsing resolves external entities, a malicious XML stream could leak internal files and/or cause a DoS.
Ссылки
- ProductThird Party Advisory
- PatchThird Party Advisory
- ProductThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 08-25-2021 (исключая)
cpe:2.3:a:kb:digger:*:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00426
Низкий
9.1 Critical
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-611
Связанные уязвимости
github
около 4 лет назад
National Library of the Netherlands digger < 6697d1269d981e35e11f240725b16401b5ce3db5 is affected by a XML External Entity (XXE) vulnerability. Since XML parsing resolves external entities, a malicious XML stream could leak internal files and/or cause a DoS.
EPSS
Процентиль: 62%
0.00426
Низкий
9.1 Critical
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-611