PT-2024-40025

Published

2024-05-20

·

Updated

2024-05-20

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions robrichards/xmlseclibs library (affected versions not specified)
Description A vulnerability has been identified in the robrichards/xmlseclibs library, specifically related to XPath injection. The issue arises from inadequate filtering of user input before it is incorporated into XPath expressions.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
GHSA-2G98-F9JV-W8C5
Found an issue in the description? Have something to add? Feel free to write us 👾