CVE-2022-31471

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files...

CVE-2022-31471

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files...

CVE-2022-31471

The vulnerability CVE-2022-31471 affects the Python library untangle (versions up to and including 1.2.0). The root cause is improper restriction of XML External Entity (XXE) references, enabling a remote unauthenticated attacker to read local files. A fixed release is available (version 1.2.1 )....