Description

An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.

Remediation

References

CVE-2022-48565

Related Vulnerabilities

WordPress Plugin Top 10-Popular posts for WordPress Multiple Vulnerabilities (3.2.4)

Oracle JRE CVE-2020-2816 Vulnerability (CVE-2020-2816)

PHP Out-of-bounds Write Vulnerability (CVE-2016-7127)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-2986)

WordPress Plugin YouTube Embed Cross-Site Scripting (5.2.1)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-611 CVE-2022-48565