CVE-2022-31471

State: Published
Severity: Not scored
Published: Jul 26, 2022
Updated: Aug 3, 2024
Reserved: Jul 12, 2022

Description

untangle is a python library to convert XML data to python objects. untangle versions 1.2.0 and earlier improperly restricts XML external entity references. By exploiting this vulnerability, a remote unauthenticated attacker may read the contents of local files.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
untangleChristian Stefanescu	1.2.0 and earlierAffected

References

https://github.com/stchris/untangle
https://github.com/stchris/untangle/releases/tag/1.2.1
https://jvn.jp/en/jp/JVN30454777/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.