Описание
Bio.Entrez in Biopython through 186 allows doctype XXE.
A flaw was found in python-biopython. The Bio.Entrez module is vulnerable to an XML External Entity (XXE) attack when processing untrusted XML data. A remote attacker could exploit this vulnerability to disclose sensitive information from the system or potentially cause a denial of service (DoS) by consuming system resources.
Отчет
This vulnerability is rated Moderate because the Bio.Entrez module in python-biopython is susceptible to XML External Entity (XXE) attacks when processing untrusted XML data. This could lead to information disclosure or denial of service. This affects python-biopython as shipped in Fedora 42 and Fedora 43.
Дополнительная информация
Статус:
7.1 High
CVSS3
Связанные уязвимости
Bio.Entrez in Biopython through 186 allows doctype XXE.
Bio.Entrez in Biopython through 186 allows doctype XXE.
Biopython is vulnerable to doctype XML external entity (XXE) injection through Bio.Entrez
7.1 High
CVSS3