VULNERABILITY INTELLIGENCE
CVE-2021-23418
CVSS score6.3 MEDIUM
EPSS probability1.65%
CISA KEVNot currently listed
Published2021-07-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Description
The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection via the use of Fault to parse untrusted XML data, which is known to be vulnerable to XML attacks.
Weakness classification
- nvd@nist.gov: CWE-611
Primary references
- report@snyk.io — Patch, Third Party Advisory
- report@snyk.io — Patch, Third Party Advisory
- report@snyk.io — Patch, Third Party Advisory
- report@snyk.io — Exploit, Issue Tracking, Patch, Third Party Advisory
- report@snyk.io — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory