Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/21 10:16 a.m.•27 views

CVE-2026-48590

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

2.1CVSS0.00222EPSS
SaveExploits0References4
Mend
Mend
•added 2026/08/21 9:52 a.m.•3 views

CVE-2026-47079

Inappropriate Encoding for Output Context vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, Cross-site Scripting. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2,...

4.3CVSS5.8AI score0.00189EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2026/08/21 9:51 a.m.•39 views

CVE-2026-48590 Element and Attribute Names Injected Verbatim into XML Output in xml_builder

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

2.1CVSS0.00222EPSS
SaveExploits0References4
Mend
Mend
•added 2026/08/21 9:51 a.m.•2 views

CVE-2026-48590

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

4.3CVSS6AI score0.00222EPSS
SaveExploits0References10
OSV
OSV
•added 2026/08/21 9:51 a.m.•19 views

CVE-2026-48590 Element and Attribute Names Injected Verbatim into XML Output in xml_builder

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

2.1CVSS6AI score0.00222EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•2 views

CVE-2026-48590: XML Injection (aka Blind XPath Injection)

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

2.1CVSS6AI score0.00222EPSS
SaveExploits0References2
Rows per page
Query Builder