Lucene search
MitreVULNRICHMENT:CVE-2024-36827HistoryJun 07, 2024 - 12:00 a.m.
CVE-2024-36827
2024-06-0700:00:00
mitre
github.com
1
xml external entity
xxe
ebookmeta
crafted xml
denial of service
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
37.8%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of ebookmeta before v1.2.8 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.
Related
cvelist
cvelist
CVE-2024-36827
2024-06-07 00:00:00
veracode
veracode
XML Entity Expansion (XXE)
2024-06-12 05:47:47
osv
osv
CVE-2024-36827
2024-06-07 19:15:24
ebookmeta XML External Entity vulnerability
2024-06-07 21:31:54
PYSEC-2024-76
2024-06-07 19:15:00
nvd
nvd
CVE-2024-36827
2024-06-07 19:15:24
github
github
ebookmeta XML External Entity vulnerability
2024-06-07 21:31:54
cve
cve
CVE-2024-36827
2024-06-07 19:15:24
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
37.8%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-36827