exploitDog

CVE-2021-44557

Опубликовано: 08 дек. 2021

Источник: nvd

CVSS3: 9.1

CVSS2: 6.4

EPSS Низкий

Описание

National Library of the Netherlands multiNER <= c0440948057afc6e3d6b4903a7c05e666b94a3bc is affected by an XML External Entity (XXE) vulnerability in multiNER/ner.py. Since XML parsing resolves external entities, a malicious XML stream could leak internal files and/or cause a DoS.

Ссылки

https://github.com/KBNLresearch/multiNER
Product
Third Party Advisory
https://github.com/KBNLresearch/multiNER/pull/3
Patch
Third Party Advisory
https://github.com/KBNLresearch/multiNER
Product
Third Party Advisory
https://github.com/KBNLresearch/multiNER/pull/3
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kb:multiner:*:*:*:*:*:*:*:*

Версия до 08-25-2021 (исключая)

EPSS

Процентиль: 62%

0.00426

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

GHSA-h7pc-9m8f-584g

github

около 4 лет назад

National Library of the Netherlands multiNER <= c0440948057afc6e3d6b4903a7c05e666b94a3bc is affected by an XML External Entity (XXE) vulnerability in multiNER/ner.py. Since XML parsing resolves external entities, a malicious XML stream could leak internal files and/or cause a DoS.

EPSS

Процентиль: 62%

0.00426

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-611