CVE-2017-1000061

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-1000061
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000061.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000061
Downstream
Published
2017-07-17T13:18:17.923Z
Modified
2026-07-08T11:35:10.112737Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service

References

Affected packages

Git / github.com/lsh123/xmlsec

Affected ranges

Type
GIT
Repo
https://github.com/lsh123/xmlsec
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0dcb578db2c1073460958a1d08fafc379c747c98
Database specific 
{
    "cpe": "cpe:2.3:a:xmlsec_project:xmlsec:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.23"
        }
    ]
}

Affected versions

Other
XMLSEC_0211104
XMLSEC_0_0_X_START
XMLSEC_1_2_X_START
XMLSEC_MIGRATION_TO_GITHUB
XMLSEC_MSCRYPTO_083103_START
start
xmlsec-
xmlsec-0_0_10
xmlsec-0_0_5
xmlsec-0_0_7
xmlsec-0_0_8
xmlsec-0_0_8a
xmlsec-0_0_9
xmlsec-0_1_0
xmlsec-0_1_1
xmlsec-1_0_0
xmlsec-1_0_0pre1
xmlsec-1_0_0rc1
xmlsec-1_0_1
xmlsec-1_0_2
xmlsec-1_0_3
xmlsec-1_0_4
xmlsec-1_1_0
xmlsec-1_1_1
xmlsec-1_1_2
xmlsec-1_2_0
xmlsec-1_2_1
xmlsec-1_2_10
xmlsec-1_2_11
xmlsec-1_2_13
xmlsec-1_2_14
xmlsec-1_2_15
xmlsec-1_2_16
xmlsec-1_2_17
xmlsec-1_2_18
xmlsec-1_2_19
xmlsec-1_2_2
xmlsec-1_2_20
xmlsec-1_2_21
xmlsec-1_2_22
xmlsec-1_2_23
xmlsec-1_2_3
xmlsec-1_2_4
xmlsec-1_2_5
xmlsec-1_2_6
xmlsec-1_2_7
xmlsec-1_2_8
xmlsec-1_2_9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000061.json"