1 matches found
XML External Entity (XXE) Injection
easy-xml is vulnerable to XML external entity injection. When processing XML data, the parseXML function in init .py allows an attacker to access sensitive data or crash the application...