Unscored BSI-2022-0001 1 CVE

CVRF-CSAF-Converter: XML External Entities Vulnerability

Published Mar 17, 2022 · Updated Jul 14, 2022 · Revision 2

Vendor: CSAF Tools Product: CVRF-CSAF-Converter

Vulnerabilities 1

Medium 6.1

CVE-2022-27193

XML External Entities Vulnerability in CVRF-CSAF-Converter

CVRF-CSAF-Converter before 1.0.0-rc2 resolves XML External Entities (XXE). This leads to the inclusion of arbitrary (local) file content into the generated output document. An attacker can exploit this to disclose information from the system running the conve…

cvrf2csaf PyPI

Mar 15, 2022

Revision history

2022-07-14 #2
Add legal disclaimer and canonical url, adjust vulnerability description to CVE description.
2022-03-17 #1
Initial revision