CVE-2021-44556

2021-12-0811:16:57

mitre

www.cve.org

national library

netherlands

xml external entity

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

62.2%

JSON

National Library of the Netherlands digger < 6697d1269d981e35e11f240725b16401b5ce3db5 is affected by a XML External Entity (XXE) vulnerability. Since XML parsing resolves external entities, a malicious XML stream could leak internal files and/or cause a DoS.

References

github.com/KBNLresearch/digger

github.com/KBNLresearch/digger/pull/1