Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13306
HistoryFeb 07, 2019 - 1:11 a.m.

XML Injection

2019-02-0701:11:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.001 Low

EPSS

Percentile

45.4%

aioxmpp is vulnerable to XML injection. An improper handling of structural elements in the stanza parser allows for a remote attacker to inject arbitrary elements into the XML stream, causing loss of data or a denial of service condition when the application reconnects.

CPENameOperatorVersion
aioxmpple0.10.2

0.001 Low

EPSS

Percentile

45.4%