Lucene search

K
cvelistMitreCVELIST:CVE-2023-34411
HistoryJun 05, 2023 - 12:00 a.m.

CVE-2023-34411

2023-06-0500:00:00
mitre
www.cve.org
xml-rs
rust
denial of service
invalid token
xml document

0.001 Low

EPSS

Percentile

45.3%

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9.

0.001 Low

EPSS

Percentile

45.3%