Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Srikanthprathio

#38629de 56,330
7.5CVSS total
Vulnerabilidades · 1
PT-2023-11757
7.5
2023-06-29
Unknown · Easy-Parse · CVE-2020-26710
**Name of the Vulnerable Software and Affected Versions** easy-parse version 0.1.1 **Description** The issue allows attackers to execute arbitrary code via a crafted XML file, exploiting a XML External Entity Injection (XXE) vulnerability. **Recommendations** For easy-parse version 0.1.1, update to a version that fixes the XML External Entity Injection (XXE) vulnerability. As a temporary workaround, consider restricting the parsing of external XML entities to minimize the risk of exploitation.