Lucene search
HistoryJun 07, 2024 - 7:15 p.m.
CVE-2024-37388
xml external entity
vulnerability
ebookmeta.get_metadata
lxml
denial of service
crafted xml input
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
0.001
Percentile
37.8%
An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.
Affected configurations
Node
dnkorpushovebookmetaRange<4.9.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dnkorpushov | ebookmeta | * | cpe:2.3:a:dnkorpushov:ebookmeta:*:*:*:*:*:*:*:* |
Related
nessus
nessus
EulerOS 2.0 SP9 : python-lxml (EulerOS-SA-2024-2402)
2024-09-12 00:00:00
EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2024-2427)
2024-09-12 00:00:00
EulerOS 2.0 SP9 : python-lxml (EulerOS-SA-2024-2377)
2024-09-12 00:00:00
github
github
ebookmeta XML External Entity vulnerability
2024-06-07 21:31:54
openvas
openvas
Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2024-2402)
2024-09-12 00:00:00
Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2024-2450)
2024-09-12 00:00:00
Huawei EulerOS: Security Advisory for python-lxml (EulerOS-SA-2024-2377)
2024-09-12 00:00:00
cvelist
cvelist
CVE-2024-37388
2024-06-07 00:00:00
osv
osv
ebookmeta XML External Entity vulnerability
2024-06-07 21:31:54
ubuntucve
ubuntucve
CVE-2024-37388
2024-06-07 00:00:00
cve
cve
CVE-2024-37388
2024-06-07 19:15:24
vulnrichment
vulnrichment
CVE-2024-37388
2024-06-07 00:00:00
veracode
veracode
XML Entity Expansion (XXE)
2024-06-12 06:24:29
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
0.001
Percentile
37.8%
Related for NVD:CVE-2024-37388