Skip to content
OpenAdvisories
High · 7.1 CVE-2015-8549 EUVD-2020-0154GHSA-m7m4-4vm8-55wgPYSEC-2020-339

PyAMF vulnerable to XML external entity (XXE)

Published Jan 15, 2020 · Updated Aug 6, 2024 · Assigned by mitre

Description

XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files via a crafted Action Message Format (AMF) payload.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI pyamf < 0.8.0 0.8.0 GHSA-m7m4-4vm8-55wg

References