CVE-2022-31471

Name of the Vulnerable Software and Affected Versions untangle versions 1.2.0 and earlier

Description untangle is a python library to convert XML data to python objects. It improperly restricts XML external entity references, allowing a remote unauthenticated attacker to read the contents of local files by exploiting this issue.

Recommendations For versions 1.2.0 and earlier, update to version 1.2.1 to resolve the issue. As a temporary workaround, consider restricting XML external entity references to minimize the risk of exploitation.