Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of lxml before v4.9.1 allows attackers to access sensitive information or cause a Denial of Service (DoS) via crafted XML input.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ebookmeta 安全漏洞
Vulnerability Description
ebookmeta是Dmitrii个人开发者的一个用于管理 epub2、epub3 和 fb2 文件元数据的 Python 库。 ebookmeta v1.2.8 之前版本存在安全漏洞，该漏洞源于ebookmeta.get_metadata 函数存在 XML 外部实体漏洞，允许攻击者借此访问敏感信息或通过特制的 XML 输入引发拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A