Xxe

2022-09-0713:15:00

PRIOn knowledge base

www.prio-n.com

ddmal mei2volpiano

xml external entity

xxe

vulnerability

denial of service

xml.etree

0.002 Low

EPSS

Percentile

59.2%

JSON

DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service. This occurs due to the usage of the unsafe ‘xml.etree’ library to parse untrusted XML input.

CPENameOperatorVersion
mei2volpianole0.8.2

CPE	Name	Operator	Version
	mei2volpiano	le	0.8.2

References

docs.python.org/3/library/xml.html

github.com/DDMAL/MEI2Volpiano/

github.com/DDMAL/MEI2Volpiano/blob/987b70fff991235e682405f901388af0f414eaa8/mei2volpiano/mei2volpiano.py

pyup.io/vulnerabilities/CVE-2022-37189/50928/

0.002 Low

EPSS

Percentile

59.2%

JSON

Related for PRION:CVE-2022-37189