OpenTAXII

OpenTAXII EclecticIQ による Python 製 TAXII サーバー実装です。 OpenTAXII は、TAXII Services の堅牢な Python 実装であり、優れた設計のアプリケーション上に構築された、豊富な機能セットと使いやすい Python らしい API を提供します。 OpenTAXII は、TAXII クライアントライブラリである Cabby との互換性が保証されています。 ソース | ドキュメント | 情報 | ダウンロード プロジェクトの現状...

darwis-taxii

DARWIS TAXII Rust で書かれた高性能な TAXII（Trusted Automated eXchange of Indicator Information）サーバー。 EclecticIQ OpenTAXII の Rust 移植版で、完全なデータベース互換性を備えています。 機能 TAXII 1.x - Discovery、Poll、Inbox、Collection Management、Subscriptions TAXII 2.1 - Collections、Objects、Manifest、Versions、Status を含む完全な REST API STIX...

GHSA-836C-XG97-8P4H libtaxii Server-Side Request Forgery vulnerability

"TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the nonetwork setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxml librar...

CVE-2020-27197

TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the nonetwork setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxml library...

PYSEC-2020-59

DISPUTED TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the nonetwork setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxm...

PYSEC-2020-59

DISPUTED TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the nonetwork setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxm...

CVE-2020-27197

CVE-2020-27197 affects TAXII libtaxii up to v1.1.117 and EclecticIQ OpenTAXII up to v0.2.0. The root cause is SSRF via an initial http:// substring to the parse method, even when the XML parser is configured with no_network. The vulnerability is triggered through the parse method that wraps the l...

CVE-2020-27197

TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the nonetwork setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxml library...

CVE-2020-27197: Server-Side Request Forgery (SSRF)

TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse method, even when the nonetwork setting is used for the XML parser. NOTE: the vendor points out that the parse method "wraps the lxml library...