Yüksek CVSS 7.5 PoC var
CVE-2024-28757: Libexpat: güvenlik açığı
Açıklama (NVD)
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
Özet bilgiler
- Ürün
- Libexpat Project Libexpat
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %2,01 (yüzdelik 81)
- CWE
- CWE-776
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| libexpat-project-libexpat | — | — | 2.6.2 |
| fedoraproject-fedora | 38 | 38 | — |
| fedoraproject-fedora | 39 | 39 | — |
| fedoraproject-fedora | 40 | 40 | — |
| netapp-active-iq-unified-manager | — | — | — |
| netapp-oncommand-workflow-automation | — | — | — |
| netapp-ontap | 9 | 9 | — |
| netapp-ontap-tools | 10 | 10 | — |
| netapp-windows-host-utilities | — | — | — |
| netapp-h300s-firmware | — | — | — |
| netapp-h500s-firmware | — | — | — |
| netapp-h700s-firmware | — | — | — |
| netapp-h410s-firmware | — | — | — |
| netapp-h410c-firmware | — | — | — |
| netapp-h610c-firmware | — | — | — |
| netapp-h610s-firmware | — | — | — |
Kaynaklar
- NVD kaydı
- www.openwall.com
- github.com
- github.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- security.netapp.com
- www.openwall.com
- github.com
- github.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- security.netapp.com
- cert-portal.siemens.com
- cert-portal.siemens.com
- CWE-776