CVE-2022-37189

DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service

published September 7, 2022

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service. This occurs due to the usage of the unsafe 'xml.etree' library to parse untrusted XML input.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01409 · 72.4th percentile
Published
2022-09-07T12:34Z
EPSS history
Timeline
  • 07 SEP 12:34Z
    DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service
    cvelistv5