The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2013-04-03T00:00:00
Updated: 2013-04-11T09:00:00
Reserved: 2013-02-13T00:00:00
Link: CVE-2013-1665
JSON object: View
NVD Information
Status : Modified
Published: 2013-04-03T00:55:02.207
Modified: 2013-05-15T03:35:51.290
Link: CVE-2013-1665
JSON object: View
Redhat Information
No data.
CWE