GitHub Advisoryadvisory · PyPI

GHSA-r2mj-8wgq-73m6 XML External Entity Reference in Glances

MEDIUM Published 2021-08-09 Modified 2024-09-20 Official page ↗
Aliases
CVE-2021-23418
Ecosystem
PyPI
Packages
Glances
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weaknesses
CWE-611
Reviewed
2021-08-02

Affected packages

• PyPI Glances: < 3.2.1 → fixed in 3.2.1

Description

The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks.

Related

Alias · CVE (1)

  • CVE-2021-23418 The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data,… vulnerability

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References