CVE-2021-32796

🗓️ 27 Jul 2021 21:45:13Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 120 Views

xmldom 0.6.0 and older may cause unexpected syntactic changes in XML processing due to incorrect character escaping. Upgrade to version 0.7.0 to fix. CVE-2021-3279

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses xmldom-0.8.10.tgz which is vulnerable to this CVE-2021-32796	9 Oct 202514:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to Improper Encoding or Escaping of Output due to xmldom ( CVE-2021-32796 )	22 Aug 202507:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Product Hub is affected by several vulnerabilities	29 Aug 202518:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	6 Aug 202516:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Control is vulnerable to weakness related to xmldom (CVE-2021-32796)	28 Nov 202505:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	11 Jan 202221:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in xmldom-0.9.8.tgz	27 Aug 202502:50	–	ibm
Circl	CVE-2021-32796	28 Jul 202102:12	–	circl
CNNVD	xmldom 安全漏洞	27 Jul 202100:00	–	cnnvd

NVD

Vulners

Node

xmldom_project xmldomRange<0.7.0node.js

[
  {
    "product": "xmldom",
    "vendor": "xmldom",
    "versions": [
      {
        "status": "affected",
        "version": "< 0.7.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/xmldom/xmldom/security/advisories/GHSA-5fg8-2547-mr8q
mattermost	www.mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/
github	www.github.com/xmldom/xmldom/commit/7b4b743917a892d407356e055b296dcd6d107e8b

21 Nov 2024 06:07Current

5.4Medium risk

Vulners AI Score5.4

CVSS 25

CVSS 3.15.3 - 6.5

EPSS0.01146