The vulnerability of the etree.iterparse() and ETCompatXMLParser() functions in the Lxml library for processing XML and HTML markup allows attackers to read arbitrary files.

The vulnerability of the etree.iterparse and ETCompatXMLParser functions in the Lxml library for processing XML and HTML markup is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to read arbitrary files...