CVE-2016-10149

XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response

published March 24, 2017

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05024 · 92.2th percentile
Published
2017-03-24T14:00Z
EPSS history
Timeline
  • 24 MAR 14:00Z
    XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response
    cvelistv5