CVE-2017-1000061

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or…

published July 13, 2017

CVSS
—
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01341 · 71.1th percentile
Published
2017-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or…
    cvelistv5