3 matches found
CVE-2024-37388
An XML External Entity XXE vulnerability in the ebookmeta.getmetadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service DoS via crafted XML input...
9.1CVSS0.00536EPSS
SaveExploits0References1
PYSEC-2024-76
An XML External Entity XXE vulnerability in the ebookmeta.getmetadata function of ebookmeta before v1.2.8 allows attackers to access sensitive information or cause a Denial of Service DoS via crafted XML input...
7.5CVSS7.3AI score0.00502EPSS
SaveExploits0References2
CVE-2024-37388: Improper Restriction of XML External Entity Reference
An XML External Entity XXE vulnerability in the ebookmeta.getmetadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service DoS via crafted XML input...
9.1CVSS8AI score0.00536EPSS
SaveExploits0References1
20