3 matches found
UBUNTU-CVE-2024-23525
The Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE attacks because it neglects to use the noxxe option of XML::Twig...
SUSE-SU-2020:2173-2 Security update for perl-XML-Twig
This update for perl-XML-Twig fixes the following issues: - Security fix bsc1008644, CVE-2016-9180 Added: the noxxe option to XML::Twig::new, which causes the parse to fail if external entities are used to prevent malicious XML to access the filesystem. Setting expandexternalents to 0 or -1...
SUSE-SU-2020:2173-1 Security update for perl-XML-Twig
This update for perl-XML-Twig fixes the following issues: - Security fix bsc1008644, CVE-2016-9180 Added: the noxxe option to XML::Twig::new, which causes the parse to fail if external entities are used to prevent malicious XML to access the filesystem. Setting expandexternalents to 0 or -1...