Lucene search
Veracode Vulnerability DatabaseVERACODE:47484HistoryJun 12, 2024 - 6:24 a.m.
XML Entity Expansion (XXE)
2024-06-1206:24:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
xml entity expansion
vulnerability
improper handling
crafted xml input
lxml dependency
sensitive information
denial of service
ebookmeta
get_metadata
ebookmeta is vulnerable to an XML External Entity (XXE) vulnerability. The vulnerability is due to improper handling of crafted XML input via the lxml dependency in the ebookmeta.get_metadata function, allowing attackers to access sensitive information or cause a Denial of Service (DoS).
Related
github
github
ebookmeta XML External Entity vulnerability
2024-06-07 21:31:54
cvelist
cvelist
CVE-2024-37388
2024-06-07 00:00:00
nvd
nvd
CVE-2024-37388
2024-06-07 19:15:24
osv
osv
ebookmeta XML External Entity vulnerability
2024-06-07 21:31:54
ubuntucve
ubuntucve
CVE-2024-37388
2024-06-11 00:00:00
cve
cve
CVE-2024-37388
2024-06-07 19:15:24
vulnrichment
vulnrichment
CVE-2024-37388
2024-06-07 00:00:00