Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-5V43-55M5-QR8F
HistoryMay 17, 2022 - 3:06 a.m.

getID3 is vulnerable to XML External Entity (XXE)

2022-05-1703:06:13
CWE-611
GitHub Advisory Database
github.com
13
getid3
xml external entity (xxe)
owncloud server

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.007

Percentile

80.8%

JSON

getID3() before 1.9.9, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.

Affected configurations

Vulners
Node
james-heinrichgetid3Range<1.9.9
VendorProductVersionCPE
james-heinrichgetid3*cpe:2.3:a:james-heinrich:getid3:*:*:*:*:*:*:*:*

Related

seebug 1
prion 2
ubuntucve 1
friendsofphp 2
osv 3
cve 2
debiancve 1
nvd 2
cvelist 2
wpvulndb 1
owncloud 2
openvas 4
debian 1
nessus 3
seebug
seebug
getID3() XML外部实体漏洞
2014-03-19 00:00:00
prion
prion
Xxe
2014-06-04 14:55:00
Xxe
2017-10-17 14:29:00
ubuntucve
ubuntucve
CVE-2014-2053
2014-06-04 00:00:00
friendsofphp
friendsofphp
Potential XXE security issue
2014-09-14 18:13:30
Potential XXE security issue
2014-09-14 18:13:30
osv
osv
getID3 is vulnerable to XML External Entity (XXE)
2022-05-17 03:06:13
wordpress - security update
2014-09-17 00:00:00
wordpress - security update
2014-08-09 00:00:00
cve
cve
CVE-2014-2053
2014-06-04 14:55:03
CVE-2014-9487
2017-10-17 14:29:00
debiancve
debiancve
CVE-2014-2053
2014-06-04 14:55:03
nvd
nvd
CVE-2014-2053
2014-06-04 14:55:03
CVE-2014-9487
2017-10-17 14:29:00
cvelist
cvelist
CVE-2014-2053
2014-06-04 14:00:00
CVE-2014-9487
2017-10-17 14:00:00
wpvulndb
wpvulndb
WordPress 3.6 - 3.9.1 XXE in GetID3 Library
2014-09-16 18:19:44
owncloud
owncloud
XXE in multiple third party components - ownCloud
2014-07-03 18:22:45
Server: XXE in multiple third party components
2014-07-03 02:00:00
openvas
openvas
ownCloud Multiple Vulnerabilities-02 (Jul 2014)
2014-07-03 00:00:00
Debian: Security Advisory (DLA-56-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3001-1 (wordpress - security update)
2014-08-09 00:00:00
debian
debian
[SECURITY] [DLA 56-1] wordpress security update
2014-09-17 12:05:09
nessus
nessus
Debian DLA-56-1 : wordpress security update
2015-03-26 00:00:00
Debian DSA-3001-1 : wordpress - security update
2014-08-10 00:00:00
WordPress < 3.7.4 / 3.8.4 / 3.9.2 Multiple Vulnerabilities
2014-08-12 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.007

Percentile

80.8%

JSON
Related for GHSA-5V43-55M5-QR8F
seebug1prion2ubuntucve1friendsofphp2osv3cve2debiancve1nvd2cvelist2wpvulndb1owncloud2openvas4debian1nessus3