Lucene search

K
osvGoogleOSV:GHSA-52WR-3VWW-RMPQ
HistoryMay 17, 2022 - 4:44 a.m.

SOAPpy vulnerable to XML External Entity attacks

2022-05-1704:44:24
Google
osv.dev
9
soappy
0.12.5
xml external entity

EPSS

0.004

Percentile

72.0%

SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.