CVE-2024-37388

2024-06-0719:15:24

[email protected]

web.nvd.nist.gov

vulnerability

xml

lxml

denial of service

crafted xml input

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

References

github.com/dnkorpushov/ebookmeta/issues/16#issue-2317712335