EUVD-2023-0189

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

OWSLib's XML parser can allow arbitrary file reads; upgrade to version 0.28.1 to mitigate risk.

Reporter	Title	Published	Views	Family All 47
Circl	CVE-2023-27476	7 May 202614:08	–	circl
CNNVD	OWSLib 代码问题漏洞	7 Mar 202300:00	–	cnnvd
CVE	CVE-2023-27476	7 Mar 202323:20	–	cve
Cvelist	CVE-2023-27476 XML External Entity (XXE) Injection in OWSLib	7 Mar 202323:20	–	cvelist
Debian	[SECURITY] [DLA 3470-1] owslib security update	25 Jun 202318:34	–	debian
Debian	[SECURITY] [DSA 5426-1] owslib security update	14 Jun 202302:25	–	debian
Debian CVE	CVE-2023-27476	7 Mar 202323:20	–	debiancve
Tenable Nessus	Debian dla-3470 : owslib-doc - security update	25 Jun 202300:00	–	nessus
Tenable Nessus	Debian DSA-5426-1 : owslib - security update	14 Jun 202300:00	–	nessus
Tenable Nessus	Fedora 37 : mingw-python-OWSLib (2023-8312a80917)	18 Mar 202300:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "2ca97190-4d56-3237-80f4-2090960c1d95",
        "vendor": {
          "name": "geopython"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2173a7f6-4a61-3916-9863-8bec882e8d11",
        "product": {
          "name": "OWSLib"
        },
        "product_version": "< 0.28.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/geopython/OWSLib/security/advisories/GHSA-8h9c-r582-mggc
github	www.github.com/geopython/OWSLib/pull/863/commits/b92687702be9576c0681bb11cad21eb631b9122f
securitylab	www.securitylab.github.com/advisories/GHSL-2022-131_owslib/
debian	www.debian.org/security/2023/dsa-5426
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-27476
github	www.github.com/geopython/OWSLib/releases/tag/0.28.1
github	www.github.com/pypa/advisory-database/tree/main/vulns/owslib/PYSEC-2023-86.yaml
lists	www.lists.debian.org/debian-lts-announce/2023/06/msg00032.html
suse	www.suse.com/security/cve/CVE-2023-27476.html

03 Oct 2025 20:07Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.5 - 8.2

EPSS0.00168

SSVC