CVE-2022-31471

🗓️ 26 Jul 2022 05:10:27Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 78 Views

Untangle python library 1.2.0 and earlier allows remote unauthenticated attacker to read local files via improper XML entity restrictions (CVE-2022-31471)

Reporter	Title	Published	Views	Family All 19
ATTACKERKB	CVE-2022-31471	26 Jul 202206:15	–	attackerkb
CNNVD	untangle 代码问题漏洞	25 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-31471	26 Jul 202205:10	–	cvelist
Debian CVE	CVE-2022-31471	26 Jul 202205:10	–	debiancve
EUVD	EUVD-2022-0350	3 Oct 202520:07	–	euvd
Github Security Blog	untangle vulnerable to Improper Restriction of XML External Entity Reference	6 Aug 202205:30	–	github
Japan Vulnerability Notes	JVN#30454777: Multiple vulnerabilities in untangle	25 Jul 202200:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in untangle	25 Jul 202205:18	–	jvn
NVD	CVE-2022-31471	26 Jul 202206:15	–	nvd
OSV	DEBIAN-CVE-2022-31471	26 Jul 202206:15	–	osv

NVD

Vulners

Node

untangle_project untangleRange≤1.2.0python

[
  {
    "product": "untangle",
    "vendor": "Christian Stefanescu",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.0 and earlier"
      }
    ]
  }
]