BIT-python-2022-48565 PUBLISHED CVSS 9.800000190734863 CRITICAL

An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.

Risk Scores

CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Bitnamipython0, 3.7.0, 3.8.0

Timeline

References

Open in Interactive Console →