CVE-2022-31471

untangle is a python library to convert XML data to python objects

published July 26, 2022

CVSS
—
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01699 · 77.0th percentile
Published
2022-07-26T05:10Z
EPSS history
Timeline
  • 26 JUL 05:10Z
    untangle is a python library to convert XML data to python objects
    cvelistv5