Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/12/03 10:2 p.m.2 views

CVE-2025-66371

Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host...

5CVSS6.9AI score0.00013EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2025/11/28 6:32 a.m.3 views

Peppol-py is vulnerable to XXE attacks due to Saxon configuration

Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host...

5CVSS6.9AI score0.00013EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2025/11/28 6:32 a.m.3 views

GHSA-24HM-WM2H-H8W7 Peppol-py is vulnerable to XXE attacks due to Saxon configuration

Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host...

5CVSS6.8AI score0.00013EPSS
Exploits0References6
Snyk
Snyk
added 2025/11/28 4:42 a.m.7 views

XML External Entity (XXE) Injection

Overview peppol-py is an A python implementation for sending peppol eDelivery AS4 documents. Affected versions of this package are vulnerable to XML External Entity XXE Injection via the XML validation process. An attacker can access sensitive files from the filesystem and exfiltrate their conten...

5.3CVSS7.4AI score0.00013EPSS
Exploits0References2
OSV
OSV
added 2025/11/28 4:16 a.m.2 views

CVE-2025-66371

Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host...

5CVSS6.8AI score
Exploits0References4
Cvelist
Cvelist
added 2025/11/28 12:0 a.m.5 views

CVE-2025-66371

Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host...

5CVSS0.00013EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/11/28 12:0 a.m.3 views

CVE-2025-66371

Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remote host...

5CVSS6.5AI score0.00013EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/11/28 12:0 a.m.3 views

Peppol-py 代码问题漏洞

Peppol-py is a Python library open-sourced by Iteras. A code issue vulnerability exists in Peppol-py versions prior to 1.1.1, which stems from a Saxon misconfiguration that could lead to an XXE attack...

5CVSS6.6AI score0.00013EPSS
Exploits0References3
Rows per page
Query Builder