CVE-2024-46455

Summary

unstructured v.0.14.2 and before is vulnerable to XML External Entity (XXE) via the XMLParser.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/Unstructured-IO/unstructured/tree/0.14.2
• https://binarysouljour.me/cve-2024-46455

• ←Previous
• Next→