darwis-taxii

DARWIS TAXII 一个使用 Rust 编写的高性能 TAXII（可信自动化指标信息交换，Trusted Automated eXchange of Indicator Information）服务器。 EclecticIQ OpenTAXII 的 Rust 移植版本，与数据库完全兼容。 功能特性 TAXII 1.x - 发现（Discovery）、轮询（Poll）、收件箱（Inbox）、集合管理（Collection Management）、订阅（Subscriptions） TAXII 2.1 - 完整的 REST...

OpenTAXII

OpenTAXII 来自 EclecticIQ 的 Python TAXII 服务器实现。 OpenTAXII 是 TAXII 服务的稳健 Python 实现， 提供丰富的功能集和友好的 Python 风格 API，构建于精心设计的 应用程序之上。 OpenTAXII 保证与 TAXII 客户端库 Cabby 兼容。 源代码 | 文档 | 信息 | 下载 项目状态 我们已决定将此项目视为功能完备 。这意味着我们仍会维护它，但只专注于修复错误。不过，我们非常欢迎外部贡献——如果您知道如何修复问题并能提交 PR，我们将非常感激。 快速开始 参见文档。 使用 Docker 快速开始...

GHSA-836C-XG97-8P4H libtaxii Server-Side Request Forgery vulnerability

"TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the nonetwork setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxml librar...

CVE-2020-27197

TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the nonetwork setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxml library...

PYSEC-2020-59

DISPUTED TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the nonetwork setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxm...

PYSEC-2020-59

DISPUTED TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the nonetwork setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxm...

CVE-2020-27197

CVE-2020-27197 affects TAXII libtaxii up to v1.1.117 and EclecticIQ OpenTAXII up to v0.2.0. The root cause is SSRF via an initial http:// substring to the parse method, even when the XML parser is configured with no_network. The vulnerability is triggered through the parse method that wraps the l...

CVE-2020-27197

TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the nonetwork setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxml library...