CVE-2017-1000190

ADVISORY - github

Summary

SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.

EPSS Score⁠: 0.00351 (0.569)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-611⁠

Improper Restriction of XML External Entity Reference

ADVISORY - github

CWE-611⁠

Improper Restriction of XML External Entity Reference

ADVISORY - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-611⁠

Improper Restriction of XML External Entity Reference

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

Impacted images

Advisories

NIST

CREATED

8 years ago

UPDATED

3 months ago

ADVISORY IDCVE-2017-1000190⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-611⁠

CVSS SCORE

9.1critical

GitHub

CREATED

4 years ago

UPDATED

3 months ago

ADVISORY IDGHSA-f5qf-vh69-9q4r⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-611⁠

CVSS SCORE

9.1critical

Debian

CREATED

8 years ago

UPDATED

2 months ago

ADVISORY IDCVE-2017-1000190⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

8 years ago

UPDATED

3 months ago

ADVISORY IDCVE-2017-1000190⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

9.1medium

GitLab

CREATED

4 years ago

UPDATED

3 months ago

ADVISORY ID

CVE-2017-1000190

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1035⁠CWE-611⁠CWE-937⁠

CVSS SCORE

9.1critical

intheWild

CREATED

9 months ago

UPDATED

9 months ago

ADVISORY IDCVE-2017-1000190⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY