CVE-2022-33977

untangle is a python library to convert XML data to python objects

published July 26, 2022

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts recursive entity references in DTDs. By exploiting this vulnerability, a remote unauthenticated attacker may cause a denial-of-service (DoS) condition on the server where the product is running.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01806 · 78.4th percentile
Published
2022-07-26T05:10Z
EPSS history
Timeline
  • 26 JUL 05:10Z
    untangle is a python library to convert XML data to python objects
    cvelistv5