GHSA-7xr3-6ggc-wc9p

untangle vulnerable to XML Entity Expansion

Source: GitHub Advisory Database (reviewed) High CVE-2022-33977

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	untangle	< 1.2.1	1.2.1

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact An attacker may be able to cause a denial-of-service (DoS) condition on the server on which the product is running. This affects untangle versions up to and including 1.2.0 ### Patches The problem has been fixed with version 1.2.1 ### Workarounds None ### References https://jvn.jp/en/jp/JVN30454777/ ### For more information If you have any questions or comments about this advisory: * Open an [issue](https://github.com/stchris/untangle/issues)

References

External links from the advisory. They lead to third-party sites.

https://github.com/stchris/untangle/security/advisories/GHSA-7xr3-6ggc-wc9p web
https://nvd.nist.gov/vuln/detail/CVE-2022-33977 advisory
https://github.com/pypa/advisory-database/tree/main/vulns/untangle/PYSEC-2022-243.yaml web
https://github.com/stchris/untangle package
https://github.com/stchris/untangle/releases/tag/1.2.1 web
https://jvn.jp/en/jp/JVN30454777 web