CVE-2024-36827

2024-06-0719:15:24

Google

osv.dev

ebookmeta

xxe

vulnerability

xml

dos

crafted xml input

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of ebookmeta before v1.2.8 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.

CPENameOperatorVersion
ebookmetaeq1.2.4
ebookmetaeq1.0.4
ebookmetaeq1.1.4
ebookmetaeq1.2.3
ebookmetaeq0.11.5
ebookmetaeq1.0.2
ebookmetaeq1.0.3
ebookmetaeq1.1.3
ebookmetaeq1.2
ebookmetaeq0.11.2

Name	Operator	Version
ebookmeta	eq	1.2.4
ebookmeta	eq	1.0.4
ebookmeta	eq	1.1.4
ebookmeta	eq	1.2.3
ebookmeta	eq	0.11.5
ebookmeta	eq	1.0.2
ebookmeta	eq	1.0.3
ebookmeta	eq	1.1.3
ebookmeta	eq	1.2
ebookmeta	eq	0.11.2