Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-39371 →
DEBIAN-CVE-2021-39371
An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
pywps
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1"}]}]
Debian:13
pywps
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1"}]}]
Debian:14
pywps
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1"}]}]
Références
- advisory security-tracker.debian.org