Количество 2
Количество 2
CVE-2025-66371
8 месяцев назад
Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host.
CVSS3: 5
EPSS: Низкий
GHSA-24hm-wm2h-h8w7
8 месяцев назад
Peppol-py is vulnerable to XXE attacks due to Saxon configuration
CVSS3: 5
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-66371 Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host. | CVSS3: 5 | 0% Низкий | 8 месяцев назад |
| GHSA-24hm-wm2h-h8w7 Peppol-py is vulnerable to XXE attacks due to Saxon configuration | CVSS3: 5 | 0% Низкий | 8 месяцев назад |
Уязвимостей на страницу
20