EUVD-2021-27686

Malicious code in bioql PyPI...

EUVD-2021-27687

Malicious code in bioql PyPI...

CVE-2021-40511

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40511

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40511

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

Design/Logic Flaw

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

Xxe

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40510

CVE-2021-40510 affects OBDA system Mastro 1.0. It is an XML External Entity (XXE) vulnerability that allows remote attackers to read system files via crafted DTDs. The NVD entry indicates network access with low complexity and no authentication (CVSS3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; base ...

CVE-2021-40511

The CVE concerns OBDA systems Mastro 1.0, vulnerable to XML Entity Expansion (billion laughs) that enables denial of service. The root cause is XML entity expansion handling in Mastro 1.0, enabling resource exhaustion. Documented impact is a denial of service; no public exploit details or patch/v...

CVE-2021-40511

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

PT-2022-11249

Name of the Vulnerable Software and Affected Versions Mastro version 1.0 Description The issue allows for a denial of service through an XML Entity Expansion attack, also known as a "billion laughs" attack. Recommendations For Mastro version 1.0, consider disabling XML Entity Expansion to prevent...

CVE-2021-40510: Improper Restriction of XML External Entity Reference

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40511: Improper Restriction of Recursive Entity References in DTDs

OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion aka “billion laughs” attack allowing denial of service...

OBDA systems Mastro 安全漏洞

OBDA systems Mastro is a Java tool for ontology-based data access OBDA from OBDA systems, Italy. A security vulnerability exists in OBDA systems Mastro version 1.0 that stems from an XML entity extension attack that is vulnerable to denial of service...

OBDA systems Mastro 代码问题漏洞

OBDA systems Mastro is a Java tool for ontology-based data access OBDA from OBDA systems, Italy. A code issue vulnerability exists in OBDA systems Mastro version 1.0. An attacker could use this vulnerability to read system files via a custom DTD...

PT-2022-11248

Name of the Vulnerable Software and Affected Versions Mastro version 1.0 Description The issue allows remote attackers to read system files via custom DTDs, exploiting an XML eXternal Entity XXE vulnerability in OBDA systems. Recommendations For Mastro version 1.0, as a temporary workaround,...