CVE-2016-9180

EPSS 0.43%
Veröffentlicht 22.12.2016 21:59:00
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless of the option's setting.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Xmltwig ≫ Xml-twig For Perl Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.43%	0.618

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.1	3.9	5.2	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:N/A:P

CWE-611 Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00020.html

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00033.html

http://www.openwall.com/lists/oss-security/2016/11/04/2

Third Party Advisory

http://www.securityfocus.com/bid/94219

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-9180

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-9180

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-9180

EUVD