The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2013-04-03T00:00:00
Updated: 2013-04-11T09:00:00
Reserved: 2013-02-13T00:00:00
Link: CVE-2013-1664
JSON object: View
NVD Information
Status : Modified
Published: 2013-04-03T00:55:02.177
Modified: 2013-05-15T03:35:50.693
Link: CVE-2013-1664
JSON object: View
Redhat Information
No data.
CWE