Описание
Bio.Entrez in Biopython through 186 allows doctype XXE.
A flaw was found in python-biopython. The Bio.Entrez module is vulnerable to an XML External Entity (XXE) attack when processing untrusted XML data. A remote attacker could exploit this vulnerability to disclose sensitive information from the system or potentially cause a denial of service (DoS) by consuming system resources.
Отчет
This vulnerability is rated Moderate because the Bio.Entrez module in python-biopython is susceptible to XML External Entity (XXE) attacks when processing untrusted XML data. This could lead to information disclosure or denial of service. This affects python-biopython as shipped in Fedora 42 and Fedora 43.
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
Biopython is vulnerable to doctype XML external entity (XXE) injection through Bio.Entrez
EPSS
7.1 High
CVSS3