VULNERABILITY INTELLIGENCE
CVE-2022-48565
CVSS score9.8 CRITICAL
EPSS probability5.23%
CISA KEVNot currently listed
Published2023-08-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
Weakness classification
- nvd@nist.gov: CWE-611
Primary references
- cve@mitre.org — Exploit, Issue Tracking, Patch, Vendor Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108