CVE-2024-37388
June 7, 2024, 7:24 p.m.
Tags
Product(s) Impacted
lxml
- before 4.9.1
Description
An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.
Weaknesses
Date
Published: June 7, 2024, 7:15 p.m.
Last Modified: June 7, 2024, 7:24 p.m.
Status : Awaiting Analysis
CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
More infoSource
cve@mitre.org